[Resolved] suhosin patch question

[darksoul]

Hello,

I was curious on if there was any configuration needed after compiling PHP5 with the suhosin patch. The reason I'm asking this is because my php.ini does not seem to have any of the suhosin php functions in it.

 

[NiteWave]

please refer:
http://www.hardened-php.net/suhosin/configuration.html

"For most users the Suhosin will work out of the box without any change to the default configuration needed"

you can change the default configuration described in above URL.

 

[darksoul]

Yes, I read that. The problem I'm having is the default config was never written to the php.ini when it was installed through litespeed's php compiler.

So my question was and is, if the default configuration was never put in the php.ini file, will suhosin work without it or do I need to put it in manually.

 

[NiteWave]

if it's same configuration as the default, no need put in php.ini.

For example,
suhosin.executor.max_depth
default value is 0.

whether
suhosin.executor.max_depth=0
in php.ini or not, it's no difference.

I think the default value is set in suhosin's source code. This is convenient way for users.

 

[darksoul]

Ok, thanks for clarifying!.

 

[NiteWave]

I got clear too when investigating the issue.