Hi, I have a fresh ISPConfg install on Debian 11 Bullseye. I was wondering if suHOSIN is enabled during ISPConfig auto install script. How do I check? Also, how do I disable suHOSIN as the documentation I can find differs from the Debian 11 directory tree. It refers to /etc/php8.3/conf.d, I cannot locate this file. I have also checked /etc/php8.3/mod-available/conf.d, not there either. Please assist. I was also wondering how to check what version of PHP my ISPConfig install is currently running, I think its the latest version - 8.3, but unsure. Many thanks.
That you can see following instructions from here: https://forum.howtoforge.com/threads/please-read-before-posting.58408/ What is suHOSIN ?
Suhosin has not been used anymore in PHP for many years now. It was a security extension used in early PHP 5 versions, so it is highly unlikely that it is installed. And its definitely not installed by the auto-installer. php --version and ISPConfig should not use PHP 8.3 on Debian 11; the default PHP version of Debian 11 is PHP 7.4, and that's what ISPConfig should use on that Debian version. Suhosin was a PHP security extension, it was used in early PHP 5 versions, if I remember correctly. So about 10 - 15 years ago. I guess it does not even exist anymore today; at least, I have not seen it on any system in recent years.
Well it's not called Suhosin anymore but snuffleupagus but it still exists and is actively maintained even for new version. But i don't think alot of people use it anymore. https://github.com/jvoisin/snuffleupagus
