suhosin alternative

are there any alternatives avai开发者_JAVA技巧lable for suhosin? or any recent tools like it? i use eaccelerator and i heard that suhosin can't get along with it.

You could switch to APC; suhosin + APC is fine. This assumes that switching is trivial (which it is, as far as I can tell). We use APC as a persistent cache, as well as the opcode caching, so that's also a bonus.

Suhosin + APC works great. But I also recommend using AppArmor. In fact AppArmor is better at limiting the impact of vulnerabilities against your system. Its been installed by default in Ubuntu since 8.x, and is now a part of the Linux mainline.

Sektioneins recently updated to include suhosin-ng and snuffleupagus

https://github.com/sektioneins/suhosin-ng/wiki https://github.com/sektioneins/snuffleupagus

There's also non-module alternatives to scan your code for vulnerabilities:

https://github.com/psecio/parse