These forums are locked and archived, but all topics have been migrated to the new forum. You can search for this topic on the new forum: Search for Suhosin on the new forum.
This website is deprecated, and remains online only for historic access to old issues and docs for historic versions of Virtualmin. It has been unmaintained for several years, and should not be relied on for up-to-date information. Please visit www.virtualmin.com instead.
Okay, so your PHP Execution Mode is set to "mod_php".
That means PHP is using the php.ini located in /etc... so you would need to update your system php.ini file, rather than the one for your Virtual Server.
That, or you could change your PHP Execution Mode to FCGID (the default) or CGI, both of which are more secure, and allow your Virtual SErver to have it's own php.ini file.
Suhosin is a patch included in PHP by default on most distributions, and isn't something you can remove.
However, if you add "suhosin.simulation = On" to your php.ini file, it should effectively disable it.
Details on that and other options are here:
http://www.hardened-php.net/suhosin/configuration.html#suhosin.simulation
-Eric
put right but it's still alive I can not disable it with this command I'm using debian 64 bits
That would need to go into the php.ini for the specific Virtual Server you're disabling it for -- $HOME/etc/php.ini.
Also, depending on your settings, you may need to start Apache afterwards -- you can do that with "/etc/init.d/apache2 restart".
-Eric
thanks for your reply but it still remains active in the way you tried to speak but not yet resolved
If you look in Server Configuration -> Website Options, what is your PHP Execution Mode set to?
-Eric
Your system only has PHP version 5 installed, so selecting a different version for each directory is not possible.
That's what you see when clicking the "Website Options" link within Server Configuration?
That would be you are talking
Okay, so your PHP Execution Mode is set to "mod_php".
That means PHP is using the php.ini located in /etc... so you would need to update your system php.ini file, rather than the one for your Virtual Server.
That, or you could change your PHP Execution Mode to FCGID (the default) or CGI, both of which are more secure, and allow your Virtual SErver to have it's own php.ini file.
-Eric