Suhosin

[Taddy]

Have heard good things about it: http://www.hardened-php.net/suhosin/index.html
Do we have it? Is it possible to install it?
Thanks in advance.

[Idologic-DH]

it's currently not available; we do use suphp on our servers, however, that's slightly different.

we're looking into suhosin though, but we will need some more time to investigate it's effectiveness and also to ensure it doesn't break things for existing users/applications.

[Taddy]

It would be great to have it installed. It has some useful functions like string vulnerabilities protection etc. Thanks for looking into it!

[Idologic-DH]

Oh, yes, I agree The roll out would be in stages:

1) make it available, but off by default
2) turn it on globally (but leave the option to turn it off) after N weeks/months

[Taddy]

Is there any timeframe expected? ;-)

[Idologic-DH]

Not yet sure; still internally discussing it.

[Taddy]

Thanks, !