Suhosin

Virtualmin
1

wanted to know if you have a way to disable or uninstall it completely he Suhosin

2

Suhosin is a patch included in PHP by default on most distributions, and isn’t something you can remove.

However, if you add “suhosin.simulation = On” to your php.ini file, it should effectively disable it.

Details on that and other options are here:

http://www.hardened-php.net/suhosin/configuration.html#suhosin.simulation

-Eric

3

put right but it’s still alive I can not disable it with this command I’m using debian 64 bits

4

That would need to go into the php.ini for the specific Virtual Server you’re disabling it for – $HOME/etc/php.ini.

Also, depending on your settings, you may need to start Apache afterwards – you can do that with “/etc/init.d/apache2 restart”.

-Eric

5

thanks for your reply but it still remains active in the way you tried to speak but not yet resolved

6

If you look in Server Configuration -> Website Options, what is your PHP Execution Mode set to?

-Eric

7

Your system only has PHP version 5 installed, so selecting a different version for each directory is not possible.

8

That’s what you see when clicking the “Website Options” link within Server Configuration?

9

That would be you are talking

10

Okay, so your PHP Execution Mode is set to “mod_php”.

That means PHP is using the php.ini located in /etc… so you would need to update your system php.ini file, rather than the one for your Virtual Server.

That, or you could change your PHP Execution Mode to FCGID (the default) or CGI, both of which are more secure, and allow your Virtual SErver to have it’s own php.ini file.

-Eric