I currently run suPHP and have just installed php5-suhosin. Can I run them both together and if so where do I configure suhosin? As usually it is in the php5 ini file but suphp doesnt use that i dont think.
Yes you can use suhosin with suPHP. I think by default the configuration is in /etc/php5/cgi/conf.d/suhosin.ini (at least it is in debian 6).
When PHP is run by suPHP, it still try to read its configuration from the default location(s), unless you have set the "suPHP_ConfigPath" option, which overrides the default. In that case suPHP_ConfigPath points to the directory containing the php.ini file.
If unsure, create a test PHP file with a simple "phpinfo()" instruction and check what is the listed "Configuration File (php.ini) Path". That is the place where the php.ini used by suPHP is located and where you can add your own suhosin options.
If you are using Apache and virtual hosts, you can also try apache2-mpm-itk:
mpm-itk allows you to run each of your vhost under a separate uid and gid — in short, the scripts and configuration files for one vhost no longer have to be readable for all the other vhosts
Yes you can use suhosin with suPHP. I think by default the configuration is in /etc/php5/cgi/conf.d/suhosin.ini (at least it is in debian 6).
When PHP is run by suPHP, it still try to read its configuration from the default location(s), unless you have set the "suPHP_ConfigPath" option, which overrides the default. In that case suPHP_ConfigPath points to the directory containing the php.ini file.
If unsure, create a test PHP file with a simple "phpinfo()" instruction and check what is the listed "Configuration File (php.ini) Path". That is the place where the php.ini used by suPHP is located and where you can add your own suhosin options.
Hope this helps.
Regards, MValdez.
If you are using Apache and virtual hosts, you can also try
apache2-mpm-itk: