suhosin + blesta

[Paul]

We actually set up a server with suhosin in an attempt to resolve any issues prior to 2.3, but I couldn't get suhosin to log anything so I couldn't figure out what it was being triggered by. Do your suhosin installs log properly? If so, can you post logs from using Blesta?

[steve]

Unfortunately software I have installed on my site requires suhosin to be set (forum software) if I disable suhosin then errors with forum

So with that in mind cannot even think of using your software

[naja7host]

Blesta can work with ou without suhosin .

[Paul]

Originally Posted by steve

Unfortunately software I have installed on my site requires suhosin to be set (forum software) if I disable suhosin then errors with forum

So with that in mind cannot even think of using your software

I've never heard of this before.. your forum software *requires* suhosin? Suhosin doesn't provide any "features" to PHP, rather it tries to secure PHP.

[agisthos]

Ignore my earlier post, I have a new fix for the Suhosin issue for those using Cpanel.

Create a htaccess file. In that file put the line

suPHP_ConfigPath /home/*****/public_html

The ***** denotes your cpanel account username. Im fairly sure this disables Suhosin just for that html directory not for the whole server, thus allowing Blesta to be used on shared cpanel hosting servers.

Two issues

1 - I also have a full php.ini file with all the configurations settings in my directory. Im not sure if this method works without that php.ini file.

2 - This line of code breaks compatability with some parts of cpanel. Nothing serious but I will give you an example. 301 URL redirects. With this code there I was getting an error everytime I went to create one. The solution was to temporarily remove the line of code, create the redirects, then put the code back in.

The redirects worked fine after with the code back in, cpanel was just unable to create them from within the control panel. I think this will occur with anything that tries to modify the htaccess file such as FTP permissions.

Try it and see if it works for you guys.

[Cody]

A more permanent fix has been made available here: http://www.blesta.com/forums/showthread.php?p=3721