我需要在 VPS 上安装 Suhosin 安全补丁吗？
我有一个带有 Linode 的 VPS，开箱即用的 Ubuntu 服务器设置带有 Suhosin PHP安全补丁。令人烦恼的问题是它会影响一些事情，即 CakePHP 会话/cookie 以及 phpMyAdmin 的一些副作用。
由于我是唯一能够以任何方式登录服务器并将在其上编写所有代码的人，suhosin 补丁是否完全必要？我还使用框架和普遍接受的“安全”软件。如果不需要的话可以轻松删除吗？
更新 对于那些想要删除它的人，这个命令对我有用：apt-get remove php5-suhosin，此外，您可能想要删除任何配置文件（名为suhosin.ini) 可能被遗忘了。
I have a VPS with Linode and the out-of-the-box Ubuntu server setup comes with the Suhosin PHP security patch. The annoying problem is that it's effecting a few things, namely CakePHP session/cookies and a couple of side affects with phpMyAdmin.
As I'm the only person with any sort of login to the server and will be writing all code on it, is the suhosin patch completely necessary? I'm also using frameworks and what is generally accepted as "secure" software. Is it easy to remove if I don't need it?
Update
For those who want to remove it, this command worked for me: apt-get remove php5-suhosin, additionally, you may want to remove any config files (named suhosin.ini) that might have been left behind.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
在我看来，你不应该使用 Suhosin，不仅因为你面临的问题，而且因为它对我来说是死项目。最新消息是 2007 年的，站内论坛也已经死了很长时间了。我个人在我的专用服务器上禁用它，因为与第三方应用程序有太多冲突。另外，我注意到启用 suhosin 时有时会产生一些大负载。
IMO you should not use Suhosin not only because of the problems which you face, but also because it dead project for me. Last news are from 2007 and insite forum long time dead too. I personally disable it on my dedicated server because of the too many conflicts with 3rd party apps. Also I notice a some big load from time to time with enabled suhosin.
如果你真的需要禁用它，你可以这样做，但这是一个很大的痛苦，因为你必须重新安装 PHP。 Suhosin 分为两部分：模块和 PHP 源代码补丁。您只需卸载该模块即可，对于补丁，您需要重新安装 PHP。
If you REALLY need to disable it, you can do it, but it's a major pain in the ass since you have to reinstall PHP. Suhosin comes in two parts: a module and a patch to the PHP source. You can just unistall the module, for the patch, you need a fresh install of PHP.