I came across a post from 2010 which stated there were some issues with Zencart and Suhosin, particularly with suhosin.session.encrypt being switched on, i just upgraded everything on my server today and now have PHP 5.3.6 and MySQL 5.1.56 and also installed Suhosin as an additional security measure, its installed with default settings.
Everything seems to be working fine but i just wonder if i can ask if there are any known issues with Suhosin and the latest edition of Zencart. ?
If there are issues i can switch Suhosin off although more security is good, i think anyways.
Thread: Suhosin?
Results 1 to 3 of 3
-
5 Jul 2011, 02:13 PM #1
New Zenner
- Join Date
- Feb 2008
- Posts
- 51
- Plugin Contributions
- 1
Suhosin?
-
5 Jul 2011, 06:50 PM #2
Sensei
- Join Date
- Jan 2004
- Posts
- 66,450
- Plugin Contributions
- 81
Re: Suhosin?
The only complaint I've heard of lately is that some people using suhosin can't use the whos-online page in the admin to snoop in their customers' carts while they're shopping. Naturally, that's a direct result of the session content being encrypted, which of course is the whole purpose behind using suhosin in the first place.
I'm not aware of any other side-effects of using suhosin..
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
6 Jul 2011, 05:23 PM #3
New Zenner
- Join Date
- Feb 2008
- Posts
- 51
- Plugin Contributions
- 1
Re: Suhosin?
Thats great then, all working good and i'll keep suhosin activated.
Reply With Quote
Similar Threads
-
v151 Who's Online not working, no data, no suhosin
By BigD2013 in forum General QuestionsReplies: 1Last Post: 13 Mar 2013, 01:07 AM -
Suhosin and Server Info strange goings on..
By dgent in forum Installing on a Linux/Unix ServerReplies: 17Last Post: 26 Sep 2011, 10:45 AM -
Known Issue with some versions of Cpanel and Suhosin
By philip_clarke in forum General QuestionsReplies: 7Last Post: 4 Jun 2011, 06:47 PM -
Trouble disabling suhosin encrypt on server
By Soul39 in forum Installing on a Linux/Unix ServerReplies: 4Last Post: 10 Feb 2010, 12:42 AM
