A lot of my security experienced friends have told me that I need to code my web

Question

A lot of my security experienced friends have told me that I need to code my web applications for working under the Suhosin PHP patch, Suhosin being "an advanced protection system for PHP installations [...] designed to protect servers and users from known and unknown flaws in PHP applications". Sense stating that feat, I have had to rewrite quite a bit of of my functions and classes.

Is this the new standard of making secure web applications so that it is harder to exploit and compromise? Is Suhosin now a common requirement for web development in PHP?

Explanation / Answer

The description on the Suhosin website is pretty clear, emphasis mine:

If you are using PHP only for your own server and only for your own scripts and applications, then you can judge for yourself, if you trust your code enough. In that case you most probably don

Related Questions

Navigate

• Browse (All)
• Browse A
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.