Suhosin este un sistem de protectie avansat pentru PHP care a fost conceput pentru a proteja serverele de hosting si utilizatorii acestora de vulnerabilitatile cunoscute si necunoscute din aplicatiile PHP si nucleul PHP. Suhosin vine in doua parti independente, care pot fi utilizate separat sau combinate. Prima parte este un patch pentru nucleul PHP, care ofera cateva protectii de nivel scazut, iar a doua parte este o extensie PHP puternica care implementeaza numeroase alte forme de protectie.
Suhosin este acum disponibil si pentru serverele care folosesc cPanel/WHM, dezvoltatorii cPanel au introdus de curand in easyapache si posibilitatea compilarii Apache cu php 5.4 si 5.5 cu suhosin.
Iata care sunt principalele imbunatatiri ale suhosin 0.9.35, preluate de pe site-ul cPanel:
- From now only PHP >= 5.4 is officially supported
- Fix problems with the hard memory_limit on 64 bit systems
- Fix problems with user space session handler due to change in PHP 5.4.0
- Add changes in PHP 5.5 session handlers structures for PHP 5.5 compability
- Fix std post handler for PHP >= 5.3.11
- Fix suhosin logo in phpinfo() for PHP 5.5
- Change fileupload handling for PHP >= 5.4.0 to use an up to date RFC1867 replacement code
- Adapted suhosin to PHP 5.5 executor
- Added some test cases for various things
- Added suhosin.log.stdout to log to stdout (for debugging purposes only)
- Add ini_set() fail mode to suhosin.disable.display_errors
- Fix suhosin.get/post/cookie.max_totalname_length filter
- Refactor array index handling in filter to make it work always
- Added support for PHP 5.6.0alpha2
- WARNING: FUNCTION WHITELISTS/BLACKLISTS NEVER WORKED CORRECTLY WITH PHP < 5.5
Mentionam ca la megahost toate serverele de hosting shared sunt protejate cu patch-ul Suhosin pentur php.