Not planned Change the hardening extension

[FedericoS]

Hello
Since Suhosin appears to be a dead project and is incompatible with the latest versions of PHP, why not changing it?
This could be a great substitute and seems to work with the latest PHP versions.

Thanks

 

[Chris D]

We don't include any PHP hardening libraries, least of all suhosin which has been known to be a little over-zealous with XenForo in some configurations.

There's nothing for us to change here.

 

[alsoGAMER]

There's nothing for us to change here.

Technically yes, cause XF has a check to know if Suhosin is installed and enabled...

So, the question from @FedericoGB25 is to change the behavior of the checker, instead to check for Suhosin, check for Snuffleupagus

 

[Chris D]

Really if anything we would probably just remove the suhosin check at some point if fewer people were using it and a compatible drop-in replacement doesn't come to surface.

We specifically check for suhosin because if it is enabled it has been known to cause problems so from a support perspective it is useful for us to see if it is enabled or not.

There are probably other extensions we could check for but clearly it's not practical to check for everything. It's just not a big deal and we'll change the server environment report driven by what we need (it's primarily a support tool more than anything else).

 

[⭐ Alex ⭐]

We specifically check for suhosin because if it is enabled it has been known to cause problems so from a support perspective it is useful for us to see if it is enabled or not.

In that case you should update the check to check for snuffle as well, because snuffle also causes issues with XF. And I suggest to turn that line yellow if it's detected.

 

[Chris D]

We will make that change if we ascertain that the presence of snuffle becomes a significant issue via our support encounters.

 

[14DH01]

We specifically check for suhosin because if it is enabled it has been known to cause problems so from a support perspective it is useful for us to see if it is enabled or not.

In this case why didn't you add a "not useful for your version" notice? Or a green color of the modules useful for Xenforo and a red color not useful as for sushosin (I broke my head to load it).
It's confusing access the "no" for us, they had to be installed and put it on yes, while it creates bugs.