Fix PHP Request Rule (DS144886) Fix It Specification (#616)

* Fix PHP Request Rule Replacements

Fix #614.

* Update Changelog.md

Author: gfs

Changelog.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.35] - 2024-05-21
+### Rules
+Fix substitution pattern in PHP Request rule.
+
 ## [1.0.35] - 2024-5-8
 ### Pipeline
 Pipeline only changes

rules/default/security/frameworks/php.json

@@ -26,7 +26,7 @@
       {
         "name": "Change to $_GET",
         "type": "RegexReplace",
-        "replacement": "$_GET",
+        "replacement": "$$_GET",
         "pattern": {
           "pattern": "\\$_REQUEST",
           "type": "regex",
@@ -39,7 +39,7 @@
       {
         "name": "Change to $_POST",
         "type": "RegexReplace",
-        "replacement": "$_POST",
+        "replacement": "$$_POST",
         "pattern": {
           "pattern": "\\$_REQUEST",
           "type": "regex",
@@ -52,7 +52,7 @@
       {
         "name": "Change to $_COOKIE",
         "type": "RegexReplace",
-        "replacement": "$_COOKIE",
+        "replacement": "$$_COOKIE",
         "pattern": {
           "pattern": "\\$_REQUEST",
           "type": "regex",