Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:57654
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain lsces.co.uk from 213.123.26.188 cause and error)
Message-ID: <4F2BBBF9.3010501@lsces.co.uk>
Date: Fri, 03 Feb 2012 10:50:33 +0000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:9.0.1) Gecko/20111220 Firefox/9.0.1 SeaMonkey/2.6.1
MIME-Version: 1.0
To: PHP internals <internals@lists.php.net>
References: <CALjhHG_wYvJn-Z+x9fJUi+dgmZ+Ha9BD54N5VwhneJM4sg1xBQ@mail.gmail.com> <5FB5CFDA-6FE8-4C20-A9B9-7844ED96659B@nopiracy.de> <CAEZPtU7jtQTDNpUovxxnDdRunjH9BOdX=WbS8JcGz+5Wkz8ocw@mail.gmail.com> <4F2A9378.70803@thelounge.net> <4F2AC9CA.2070308@sugarcrm.com> <4F2B2ED8.4050900@jimdo.com> <72878E6C-4C17-4D94-9F73-1446769247E1@nopiracy.de> <CAEZPtU5CP3GqUnKsxx51-ieHAdGh=ySvZCWhhAwa0kwuNG6Bhg@mail.gmail.com> <A33C7716-F355-455E-863D-5458205C3208@nopiracy.de>
In-Reply-To: <A33C7716-F355-455E-863D-5458205C3208@nopiracy.de>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds
From: lester@lsces.co.uk (Lester Caine)

Stefan Esser wrote:
> I am not interested in pushing Suhosin into PHP mainline. Why in hell would I want that. If Suhosin gets absorbed by PHP.net then I would have to start a new project, because there are tons of mitigations I can think up that will be implemented at some point in time and will never make it into PHP mainline.

All my production systems have suhosin installed and have done since SUSE 
provided it by default. Just like eaccelerator, I am more than happy with these 
third party enhancements to PHP. Once again, the drive is to 'push everything 
into core' when it makes MUCH more sense to provide a much cleaner and 
consistent management system for a modular approach. SOME key features of 
suhosin do have a place in PHP, but others would not 'find approval', so 
removing suhosin is simply not an option. Cherry picking features that some 
contributors find useful is no replacement for well constructed third party 
modules, so they too need to work in harmony rather than continually battling to 
maintain compatibility. Some 'features' are not commonly required, and providing 
them as external modules is always going to be the ideal answer!

There is no 'demand' here for any support of these third party packages by the 
php developers, only that they recognise that some changes being made may result 
in problems down stream which it may be nicer to accept and address rather than 
simply saying "we don't support that" and sticking two fingers up :(

-- 
Lester Caine - G8HFL
-----------------------------
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk//
Firebird - http://www.firebirdsql.org/index.php