Suhosin is a dead project. How will Sentora move on to PHP 7.x?

[worksmarter]

Suhosin is a dead project. They don't even sign their 0.38 update version anymore.

I am at a situation where web applications are asking for PHP 7.0 as a prerequisite to their use. Without the Suhosin patch, how is the Sentora project planning to move forward and give us PHP 7.x support?

This is a big deal because as time goes by, you are going to see a mass exodus from Sentora to other solutions merely because they can safely support PHP 7.0.

[Me.B]

I think we will move off suhosin. and setup php in a different way.

M B

[cantalupo555]

Unfortunately the Sentora is dead project...
It needs to be reformulated in every way.

[Me.B]

https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes

We got same ubuntu 18.04

PHP
PHP was updated to version 7.2.x. For upstream guidance on migrating from PHP 7.1 (Artful's version) to 7.2: http://php.net/manual/en/migration72.php. Also of relevance might be the 7.0 to 7.1 migration documentation: http://php.net/manual/en/migration71.php.

[TGates]

Unfortunately the Sentora is dead project...
It needs to be reformulated in every way.

It's not dead, we are trying to sort out how to change permissions/access from virtual accounts to real accounts if it is even do able. But it is only Me.B and myself. Me.B has a plan, but I am not sure where he stands in his work or planning. We need more dedicated coders to help out.

This suhosin stuff has put us at a standstill... Supposedly the alpha version works, but its still buggy...

[franmm25]

If developers only 2 why don´t search more people and why don´t create more possibilities , announces and get more people come here to the project, i think it´s possible, for our side and by our side, and get more people for this project, really from zpanel to sentora many years grow and i think this project need more people and more "marketing" and other people come here and enjoy with sentora and all kind of possibilities

Howewer need other space in this forum and website for send questions to the people and think about what kind of future it´s necessary for Sentora

[Eulogy]

Hello World!

I'm back for few updates for the installer for my git branch

This is my projet for the next few weeks

- Notice my current branch support php 7.x

- Make installer compatible with Ubuntu 18.04.X
- Make Installer compatible with fedora til 28
- Make suhosin obsolete
- Install mod_security with Atomic Corp Rules for replacing suhosin security (compatible php 7.X)
- Install Nginx gateway with http/2.0 support
- Solve bugs on Ubuntu installation (get a report about that) -Thank you for the feedback.

This is only on the installer. If you want plug-ins or modules in Sentora for get more control on those features, I will need donation to get time. Otherwise, you will only be able to change options through command line like I do atm.

This only on my git branch. I did a request for master pull but ...

[TGates]

- Install mod_security with Atomic Corp Rules for replacing suhosin security (compatible php 7.X)

This is an interesting concept. Me.B, what are your thoughts?

[Me.B]

That's non sense. Mod_security is a layer atop apache that will processing incoming requests and filter them. It won't lock user permission to directories.

We should use instead FASTCGI & PHP-CGI. IT will require to create a user per customer and lock them.

M B

[Eulogy]

Plesk Use Mod_sec + fail2ban jail as WAF. We can even setup jail for sentora if you think that can be a problem. I'm using sentora on PHP 7.x with fail2ban, Mod_sec, firewall and SElinux, no problem til now.

Otherwise you can hope to someone can get back suhosin

https://github.com/sektioneins/suhosin7/...ae1e30d3f5