Tuesday, January 19, 2010

Using Suhosin to protect from attacking via PHP



Read about and download suhosin: http://www.hardened-php.net/suhosin/index.html
Then execute one by one these command below:
# wget http://download.suhosin.org/suhosin-0.9.29.tgz
# tar -xf suhosin-0.9.29.tgz
# cd  suhosin-0.9.29
# phpize
# ./configure
# make
# make install

Then run
# echo extension=suhosin.so > /etc/php.d/suhosin.ini

For testing suhosin has been installed properly, run this:
# php -v

If this appears, suhosin is now loaded with PHP.
with Suhosin v0.9.29, Copyright (c) 2007, by SektionEins GmbH

Now just restart apache:
# service httpd restart

No comments:

Post a Comment