Re: suhosin and 5.4 onwards

On 03/08/2013 18:50, Lester Caine wrote:

Practical experience is that suhosin does not actually work with 5.4?

Not without _unofficial_ patch(es) see attached for sessions, if it doesnt go through on list you can find the patch on github

I've had to disable it because of problems with session handling amongst other things and don't have time to investigate why.

There was a patch on suhosin mailing list for that, a few people who tried it out said it worked. I've not yet bothered, but... I saw a post from Steffen saying he has no time for suhosin and the project is being taken over by someone else, I think the jury is out on if it will ever revive, in meantime, php 5.3 works fine. if only php devs would stop fscking changing everything every time they release a new version, frustrating to many. And people who reply on mod_security are no more protected than what is being done here, since mod_security has not had the best track record itself in the past.

Would I prefer to re-enable it - YES - and it's one of a number of reasons that have been making switching currently stable PHP5.2 servers over to 5.4 less attractive. The amount of time I'm wasting on coping with many of the so called improvements across the whole Linux platform is making me feel that commercial interests are

Thats why I recommend distros that dont want to change the world and stick by tried and time proven, like slackware and gentoo, but this isnt an os flame against others, I use opensuse as well on pc's and laptops. Everything just looks after itself :)

Attachment: [text/x-diff] suhsoin-5.4.patch