Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Why is suhosin used?

Tags:

php

I found php.ini inside my website directory . The directory structure is

/mobiles/images/php.ini

Inisde the php.ini i noticed this line suhosin.simulation On

Why is this used and what does it do .

like image 890
Ragavendran Ramesh Avatar asked Jun 22 '12 12:06

Ragavendran Ramesh


People also ask

What is Suhosin extension?

Suhosin is a PHP security extension that attempts to protect against potential bugs in your application's PHP code. Suhosin may break functionality in your apps. By using this extension, you recognize that you may increase the burden on your developers and negatively affect your users as a result of breakage.

What is suhosin patch?

Suhosin (Korean 수호신, Korean pronunciation: [suɦoɕin], meaning "guardian angel") is an open source patch for PHP and also a PHP extension, written by the German company Sektion Eins. The patch and the extension are two independent parts, that can be used separately or in combination.


1 Answers

From http://www.hardened-php.net/suhosin/

Suhosin is an advanced protection system for PHP installations. It was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core. Suhosin comes in two independent parts, that can be used separately or in combination. The first part is a small patch against the PHP core, that implements a few low-level protections against bufferoverflows or format string vulnerabilities and the second part is a powerful PHP extension that implements all the other protections

http://www.hardened-php.net/suhosin/configuration.html#suhosin.simulation

When Suhosin runs in simulation mode, violations are logged as usual, but nothing is blocked or removed from the request.

like image 72
James Holwell Avatar answered Sep 20 '22 03:09

James Holwell