Re: Suhosin patch disabled by default in Debian php5 builds

Hi!

with many hundret active sessions was not a single performance problem

I'm not sure I understand what you are talking about here. Performance is a scale, not a trigger. If you lose 10% (totally invented number as an example) that doesn't mean you have 10 of "performance problems", it means you sites run 10% slower, you need 10% more servers, etc.

without bytecode-cache you have much more problems

What bytecode cache has to do with it? Sounds like a non-sequitur.

thus may not be beneficial to the most users

security is not beneficial to the most users?

Please don't do that. I never said that security is not beneficial, and as you quoted me you know that and you know that "not beneficial" related to the performance hit the mitigation measures cost.

security is THE benefit for ALL users, especially in days where many are running crap-code like Joomla/Wordpress with all sorts of plugins throwing millions of warning if you run with E_ALL and E_STRCIT

What the quality of the code of Joomla has to do with anything? Suhosin patches would not fix Joomla and most of the issues it helps with are totally unrelated to any user code at all. -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227