Re: Suhosin patch disabled by default in Debian php5 builds

Am 02.02.2012 18:37, schrieb Stas Malyshev: >> yes, but suhosin-extension and hardening patch exists since many years >> >> the question from a normal user: >> why are these things not included in the core? > > Because some of these things slow down the code we are using suhosin patch and extension since years on 5 VMware-Guests on the same host for 500 domains and even running one of them a site with many hundret active sessions was not a single performance problem without bytecode-cache you have much more problems > thus may not be beneficial to the most users security is not beneficial to the most users? security is THE benefit for ALL users, especially in days where many are running crap-code like Joomla/Wordpress with all sorts of plugins throwing millions of warning if you run with E_ALL and E_STRCIT

Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc