php – 为什么使用suhosin?

前端之家收集整理的这篇文章主要介绍了php – 为什么使用suhosin?前端之家小编觉得挺不错的,现在分享给大家,也给大家做个参考。
我在我的网站目录中找到了PHP.ini.目录结构是

/mobiles/images/PHP.ini

Inisde PHP.ini我注意到这行suhosin.simulation On

为什么使用它以及它做什么.

http://www.hardened-php.net/suhosin/

Suhosin is an advanced protection system for PHP installations. It was
designed to protect servers and users from known and unknown flaws in
PHP applications and the PHP core. Suhosin comes in two independent
parts,that can be used separately or in combination. The first part
is a small patch against the PHP core,that implements a few low-level
protections against bufferoverflows or format string vulnerabilities
and the second part is a powerful PHP extension that implements all
the other protections

http://www.hardened-php.net/suhosin/configuration.html#suhosin.simulation

When Suhosin runs in simulation mode,violations are logged as usual,but nothing is blocked or removed from the request.

猜你在找的PHP相关文章