Disable Suhosin - How?

[DReade83]

How can one disable Suhosin on a per directory basis? I can't even find the suhosin config file - does one exist?

 

[Infopro]

The forums search tool is your friend.
http://forums.cpanel.net/showthread.php?t=74792&highlight=Suhosin

 

[DReade83]

The forums search tool is your friend.
http://forums.cpanel.net/showthread.php?t=74792&highlight=Suhosin

Indeed it is, but that doesn't answer my question.

I've added "suhosin.simulation = On" to the end of my php.ini file, restarted Apache, but Suhosin is still running, and blocking scripts! Any ideas?

 

[rhenderson]

After you added

[suhosin]
; Misc Options
suhosin.simulation = On

the restarted Apache, look at your phpinfo in the suhosin section and see what the value of suhosin.simulation is.. If it is still on are you sure you edited the correct php.ini file? If it says it is off then it is off, if I am not mistaken it will SIMULATE in the logs what it would have blocked.

 

[orakanggo]

How can I disable SUHOSIN via .htaccess? because I don't have root access to modify /usr/local/lib/php.ini

thanks

 

[petteyg359]

php_flag suhosin.simulation On

This won't work if you're using suPHP.

 

[verdon]

If you are using suphp, try

1) adding this to your .htaccess

<Files ".ht*">
deny from all
</Files>

suPHP_ConfigPath /home/username

2 then create a php.ini file at /home/username/php.ini with this

suhosin.simulation = On

Note: This may be disabled by your host. If it does work, you may have to add other things to your php.ini file as it will completely over-ride the server-wide one, not just add to it.

 

[orakanggo]

Hi, I got 500 Internal Server Error when adding those lines.
The hosting server only load php.ini from /usr/local/lib/php.ini

phpinfo in http://www.oxysehat.com/test.php

any solutions?