Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Plugin fails to recognise suhosin patch #1310

Closed
halfdan opened this issue Apr 20, 2010 · 3 comments
Closed

Security Plugin fails to recognise suhosin patch #1310

halfdan opened this issue Apr 20, 2010 · 3 comments
Labels
Bug For errors / faults / flaws / inconsistencies etc.
Milestone

Comments

@halfdan
Copy link
Member

halfdan commented Apr 20, 2010

I just patched my PHP 5.3.2 with the suhosin patch and recognised that Piwiks security plugin fails to recognise the patch.

The error was to check for suhosin variables identified in php.ini. My php was running without any changes to the default suhosin settings, therefore no suhosin.* variable was defined.

It is easy to resolv this problem - the suhosin patch defines a constant "SUHOSIN_PATCH" which is easy to get via get_defined_constants().
Keywords: suhosin

@halfdan
Copy link
Member Author

halfdan commented Apr 20, 2010

Attachment: Fixed version of patch.php in /SecurityInfo/PhpSecInfo/Test/Suhosin/
plugin.security.patch

@robocoder
Copy link
Contributor

In [2112], fixes #1310 - fix PhpSecInfo test for Suhosin patch; thanks halfdan

@robocoder
Copy link
Contributor

(In [3237]) fixes #1753, refs #1310 - get_defined_constants(false) is broken prior to php 5.2.11

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug For errors / faults / flaws / inconsistencies etc.
Projects
None yet
Development

No branches or pull requests

2 participants