Hardened PHP

Frank Kreuzbach writes "Yesterday the Hardened-PHP Project has announced its existence on the PHP-general mailinglist. It is the first public patch for PHP which adds security hardening features. It is meant as a proactive approach to protect servers against known and unknown weaknesses within PHP scripts or the engine itself. It enforces restrictions on include statements, adds canary protection to allocated memory and other internal structures and protects against internal format string vulnerabilities. It has syslog support and logs every attack together with the originating ip."

Comments

Step One

[Anonymous Coward]

Don't use WinZip encryption...

This will go great with

[Anonymous Coward]

Hardened Gentoo, which I must say was an absolute breeze to setup. Selected a few kernel options, add the right USE flag, and bam.

Anyone else giggling?

[Anonymous Coward]

I do some development and site administration work for a high traffic porn site, and I can tell you that we've been using Hardened PHP since before the project announcement (I'm friends with one of the developers). It works OK so far, but the server starts to get worn out after a while , after being particularly abused by a day's peak traffic.

Re:Anyone else giggling?

[kunudo]

Nope.

Re:Already in use

[Anonymous Coward]

If there's anything as enjoyable as pushing out a nice healthy turd, I'm sure I don't know what it is!

Re:Already in use

[Espectr0]

do some development and site administration work for a high traffic porn site, and I can tell you that we've been using Hardened PHP

I can see it now. Hardened PHP is the new "manly-patch" for 2004. Gets you "hard"!

Hey honey! Wanna see my new PHP?

[Anonymous Coward]

It's hardened.

Re:I dont get this

[Lord Bitman]

somebody isnt a programmer :)