Issues experienced with Suhosin PHP Extension

New Member Joined: Mar 09, 2004 Posts: 14

I'm using Only registered users can see links on this board! Get registered or login! from Hardened-PHP on my webserver, but whenever I have the extension enabled, Sentinel doesn't want to function...

Has anyone been able to get Sentinel working properly with Suhosin? This server is a webhosting server, so I have to protect all of the hosted accounts, but some accounts use Nuke Evo + Sentinel, and I don't want to break their websites...

Any ideas?

Sells PC To Pay For Divorce Joined: Posts: 5661

Huh...why you need Suhosin?
If your server is properly configured and has all mods running etc......then you dont need that..,not even with mutiple hosting accounts/customers..
As i was looking at the Suhosin site their forum has some topics to laugh on...

Quote:

Did Suhosin protect your site from an attack? Share your story here..

Total posts... 0

But person who's most qualified (i think) to answer this is raven...

Posted: Thu Nov 30, 2006 7:16 pm

I know that Suhosin is an excellent extension, so regardless of the fact that most people wouldn't know how to find out if they've been protected from a hack attempt, I know it works.

For instance, when I enabled Suhosin, one of the other server admins that had a few poorly coded scripts, had his scripts stop working Smile

One script had a \n in the Subject of emails that it was attempting to send out. That's one thing that Suhosin blocks.

Another script included a file from the admin's own website, but was including it using http://www.hissite.bla/includefile.php instead of the relative file path. Remote file inclusion is a way that we have been infiltrated in the past, Suhosin blocked it in a friendly script (and I was able to easily fix both scripts).

So, in short, I want & need Suhosin, I'm actually less sold on the ability of Sentinel to protect a website than Suhosin (Suhosin does much of what Sentinel tries to do, except handles it at a lower level which means better performance, and operates across all sites, not just Nuke sites).

Regardless, raven, got any ideas as to why Sentinel would break with Suhosin?