What-is-Suhosin

Suhosin

1. Advanced Protection System for PHP install. 2. Protects the server and the users from known php flaws in application and also php core. 3. The Suhosin patches and the extension are available for download at http://www.hardened-php.net/suhosin/.

Step 1: Installing the Hardened-PHP Project Signaturekey

You should first grab a copy of the Hardened-PHP Project's Release Signature 

  wget http://www.hardened-php.net/hardened-php-signature-key.asc
  gpg --import < hardened-php-signature-key.asc

  md5sum suhosin-patch-5.1.4-0.9.0.patch.gz

  gpg suhosin-patch-5.1.4-0.9.0.patch.gz.sig

  gunzip suhosin-patch-5.1.4-0.9.0.patch.gz

Patch php source now ... patch -p 1 -i ../suhosin-patch-5.1.4-0.9.0.patch

OR

Step 2. Installing the Extension 

  #> cd suhosin
  #> phpize
  #> ./configure 
  #> make
  #> make install

This should install suhosin in the correct extension directory. The final step is adding a load directive to php.ini 

  extension=suhosin.so
  • In FreeBSD it's very easy
    1. > cd /usr/ports/lang/php5
    2. > make
    ... now select the menu item that says: Enable Suhosin Protection
    1. > make install

To install the extension just do 

  #> cd /usr/ports/security/php-suhosin
  #> make
  #> make install

After these simple steps Suhosin-Patch is successfully installed on your system.