Suhosin is an open source security patch for PHP.

learn more… | top users | synonyms

2
votes
1answer
262 views

What is more secure, PHP 5.3 + Suhosin or PHP 5.4/5.5?

As we know, Suhosin hardens PHP and adds another layer of security. But unfortunately there is no official release for PHP 5.4/5.5 (that I can find anyway). So that puts me in a small dilemma. Do I ...
0
votes
1answer
86 views

suhosin patch error in PHP 5.3.27

When I try applied suhosin patch, I get this errors: patch -p 1 -i ../suhosin-patch-5.3.2-0.9.9.1.patch patching file Zend/Makefile.am patching file Zend/Zend.dsp patching file Zend/ZendTS.dsp ...
0
votes
0answers
87 views

Disable php functions per website

My FreeBSD9.1 server configured for single user, and Apache serves all websites as "www" user. My aim is to disable some potentially dangerous php function on particular websites. I know it's possible ...
-1
votes
1answer
2k views

Suhosin.memory_limit does not allow PHP to use more memory

I have a server where PHP memory_limit is 256M. Some scripts need more memory and does a ini_set('memory_limit', '256M'); but since Suhosin is installed and activated, I find this in log file Sep 17 ...
0
votes
1answer
59 views

php 5.3.x [PATH=<path>] and [HOST=<host>] configuration directive

Can anyone explain how i can use theses directives? I found official documentation here. But not much explained. Here is problem. Server A is running cpanel, php 5.3.10 php.ini contains this: ...
1
vote
2answers
3k views

Debian: can not install php5-suhosin and php5-apc

Just ordered a new Debian server and for some reason can not install php5-suhosin and php5-apc. Any ideas? apt-get install php5-suhosin Reading package lists... Done Building dependency tree Reading ...
-1
votes
1answer
171 views

Patch for Suhosin for PHP 5.4.15 [closed]

I want to test if the latest dev-Suhosin Version for PHP 5.4.15 is stable and now I want to compile it along with PHP. According to this instructions (not the latest PHP and Suhosin but installation ...
1
vote
1answer
271 views

PHP: can't increase maximum upload limit

I'm using Apache + PHP 5.3.3-7 on Debian Squeeze, installed from the repositories. The PHP distribution in Debian Squeeze includes Suhosin patch. I have problems uploading files bigger than cca 4 MB, ...
4
votes
2answers
2k views

“The server closed the connection without sending any data”

Server setup The problem Diagnostic information What I've tried Specific Help needed 1. I have the following server setup: (Running in a VM using Hyper-V) Debian Squeeze Linux 2.6.32-5-amd64 ...
0
votes
1answer
45 views

PHP Requests Being Blocked After Making About 25 in Ten Minutes

We have an administrative portal where we run PHP functions through a JavaScript portal using Ajax for administrative purposes. For example, we might have a function called updateAllDatabaseEntries() ...
-2
votes
1answer
201 views

PHP SuHosin — my code is already secure… is it needed?

I believe I have set up my code quite securely, it validates and cleans user input so it's safe, etc. So would I need SuHosin? (which is a security addition/patch for PHP) How does it help me if my ...
0
votes
1answer
741 views

Setting per-folder values for suhosin settings in .htaccess

I've set suhosin.perdir = 'p' in my ini file. I would now like to change suhosin ini settings on a per-folder basis. The following all work (running phpinfo() inside the desired folder shows the ...
0
votes
2answers
420 views

Can i Run php5-suhosin with suPHP?

I currently run suPHP and have just installed php5-suhosin. Can I run them both together and if so where do I configure suhosin? As usually it is in the php5 ini file but suphp doesnt use that i dont ...
1
vote
1answer
748 views

php5-suhosin Broken Installation

Hi i get the following error when trying to install, have you any idea how to fix? apt-get install php5-suhosin Reading package lists... Done Building dependency tree Reading state ...
0
votes
1answer
59 views

Apache Server or PHP remove Postvars containing a long text

There's a postvar send to Server which gets fully removed if size reached a level. If the ammount of text in that var has a size of 66kb or greater the complete var gets deletet. Smaller Texts e.g. ...
0
votes
1answer
336 views

Disable suhosin file permission check

I have just recently found out that suhosin makes sure not to execute php files with file permissions more open than 755. However, I need to temporarily allow someone else FTP access to some files, so ...
0
votes
1answer
429 views

Centos6 and PHP with Suhosin

I'm setting up a webserver that's going to be apache + PHP. This is going to be migrated from Gentoo. In gentoo it was pretty easy to include Suhosin since it was just a useflag and a package. In ...
2
votes
2answers
226 views

Is it worth to manually compile PHP vs use deb package?

For performance reason, I'm wondering if it is worth to compile php 5.3.x myself instead of using the default .deb package. I know some PHP core developers that say that is worth to do it. By the ...
2
votes
1answer
357 views

Suhosin per-URL exceptions?

I am using SimpleID as my OpenID provider and it turns out that if I log on via pages like those on StackExchange, one of the parameters of the GET request gets dropped by Suhosin. The name of the ...
1
vote
3answers
606 views

Why is PHP Suhosin needed? Isn't PHP patched for security already?

I'm planning to set up a Linux-VPS and run a PHP site on it. I have read that it's recommended to use PHP Suhosin to patch PHP for security. But isn't PHP patched for security in every new release? or ...