(04-21-2019, 06:46 AM)americanninja Wrote: Wondering if someone can help me understand how to confirm that Suhosin is still running?
I have Ubuntu 14.04 and previously had PHP 5.5.9. I needed to upgrade to 5.6. Therefore I ran these commands:
add-apt-repository ppa:ondrej/php
add-apt-repository ppa:ondrej/apache2
apt-get update
apt-get autoremove
apt-get install php5.6 libapache2-mod-php5.6 php5.6-curl php5.6-gd php5.6-mbstring php5.6-mcrypt php5.6-mysql php5.6-xml php5.6-xmlrpc php5.6-zip
a2dismod php5
a2enmod php5.6
service apache2 restart
Appears to have worked, PHP is upgrade. When I run: php -v
I get this:
PHP 5.6.40-6+ubuntu14.04.1+deb.sury.org+3 (cli)
Copyright © 1997-2016 The PHP Group
Zend Engine v2.6.0, Copyright © 1998-2016 Zend Technologies
with Zend OPcache v7.0.6-dev, Copyright © 1999-2016, by Zend Technologies
I'm not getting any form of an error (which the Sentora support person posted earlier in this thread). So what does this mean? Do I still need to recompile suhosin or am I good to go? If it's so important, how can I check, if it's running? I look in the Sentora Portal and couldn't find Suhosin listed anywhere, with a status or something. I would assume if it's critical, it should have the status, or inform me if it's not running, right!?!?!?
I'm pretty certain that Suhosin is no longer running in your setup. Confirm it by loading up the Sentora phpinfo page (the full version) and search for "suhosin" to see if it is listed anywhere.
Usually you would need to recompile suhosin into the upgraded version of PHP.
Did you definitely read all of the posts in this thread?
You won't see a suhosin "alert" in Sentora as such, you have to go looking for it to check if it is still running as part of PHP or not.
Keith