Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

PHP Security Blog:
The Suhosin Patch, File Uploads, and Stealth Mode
Dec 05, 2006 @ 16:02:00

On the PHP Security Blog, there's two new posts concerning their Suhosin patch for PHP - one talking about a remote code execution vulnerability found in the uploadprogressmeter extension (which as already been corrected) and the other dealing with the "stealth mode" of the patch to find compatibility problems.

As mentioned, the issue with the uploadprogress extension has been fixed and as been introduced into the PECL repository. The other post just mentions what the patch is doing to try to keep compatibility problems from happening due to back extensions and/or modules being loaded in an application.

More details about the Suhosin patch can be found here.

tagged: stealth mode suhosin patch fileupload pecl extension module stealth mode suhosin patch fileupload pecl extension module

Link:


Trending Topics: