Trouble disabling suhosin encrypt on server

[Soul39]

Weii, after they did their stuff, i tested the site, went through a checkout, no "whoops" , so, i guess everything is ok for now.
But, should i still place the .htaccess file in the root dir, will it stop this from ever happening again.

code:
php_flag suhosin.session.encrypt off

Soul39

[DrByte]

But, should i still place the .htaccess file in the root dir, will it stop this from ever happening again.

You could, but it would be unnecessary if your host has already taken care of it for you.

[MattyMatt]

That (.htaccess) will only work if you are using mod_php which you can find out by going into

admin > Server version/ info

if you see anything that mentioned php-cgi or fast-cgi or suExec (possiblly mod_suPHP), then you would need a php.ini file in every folder where php was running and that is if the host allowed you that option. You'd need to be able to copy the main host's php.ini too (it would be listed in the version info) and you may not have access to that file due to security restrictions.

Matt.

[Soul39]

Yes,
but, what if they tinker again, and the problem reoccurs?
Is it not best to have something in place to prevent it?

Matt,
all that sounds a bit complicated, mate. So, i guess i will leave as is, if it's not broken, and all that.
But, i will try to have a look at the server info you mentioned.

Soul39