Suhosin

Suhosin (Korean 수호신, meaning guardian-angel, pronounced 'su-ho-shin') is an open source patch for PHP and also a PHP extension. Patch and extension are two independent parts, that can be used separately or in combination. "The goal behind Suhosin is to be a safety net that protects servers from insecure PHP coding practices."[1]

Suhosin also reduces the "attackable surface" that PHP adds to a Web Server through function whitelists, resource limits, transparent session and cookie encryption, binary content filter, logging and various other protections.[2] This reduces the risk of deploying previously deemed unsafe PHP programs and protects against known and unknown attacks.

Distribution with operating systems

In some Linux distributions, notably Debian in versions up to 6.x ("squeeze") and Gentoo Linux, it was shipped by default with both patch and extension. Suhosin was removed from Debian as of version 7 (wheezy) but reappeared in the current development branch.[3]

It is activated by default in Mac OS X Server.

As of PHP 5.4, openSUSE dropped the Suhosin patch, but maintains a port of the Suhosin extension.[4]

FreeBSD 10.1 maintains the Suhosin extension in its ports collection.

Development History

As of 2013, when PHP 5.5 released, the most current Suhosin version was targeted at PHP 5.3.9. The last news article on the website is of 2007, and no activity occurred in the code repository from May 2012 until February 2014. This led some distributions to consider the Suhosin project dead. Patches began to be committed again on February 6, 2014; latest version being 0.9.38.

New Suhosin project for PHP-7 "suhosin7" was started in December 2015. https://github.com/sektioneins/suhosin7

See also

References

  1. ↑ Chapter 13, Securing PHP Web Applications by Tricia Ballad; William Ballad Publisher: Addison-Wesley Professional, Web ISBN 978-0-321-57431-2
  2. ↑ Official Feature List
  3. ↑ Overview of package php5-suhosin in Debian sid
  4. ↑ Mailinglist Archive: opensuse-factory (418 mails)

External links


This article is issued from Wikipedia - version of the 7/6/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.