Re: Suhosin patch disabled by default in Debian php5 builds

Hi!

yes, but suhosin-extension and hardening patch exists since many years the question from a normal user: why are these things not included in the core?

Because some of these things slow down the code and thus may not be beneficial to the most users.

especially the option to disable function by directory while "disable_functions" is stupidity shown in phpinfo() per dir but never active?

With this feature this may not be a problem, however (I don't know, didn't look into the actual code). But somebody has to propose it for inclusion into the core and lead it - i.e. answer questions, participate in the discussion, change/maintain the patches, etc. If this happens, I don't see why some of the features can't be brought into code. -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227