Product

About the Suhosin

Suhosin (Korean for "guardian angel") is an open-source security system designed to protect PHP installations from known and unknown flaws in PHP applications and the PHP core itself. It comes in two independent parts: a small patch applied directly to the PHP engine for low-level protections (like buffer overflows), and a powerful PHP extension that provides numerous other runtime protections. Suhosin acts as a security filter, reducing the "attackable surface" of PHP on a web server through features like function whitelists, resource limits, transparent session and cookie encryption, a binary content filter, logging, and various other measures. It helps prevent exploits such as SQL Injection, Cross-Site Scripting (XSS), DoS attacks, and arbitrary code execution, especially for servers hosting third-party PHP applications.