diff --git a/reference/suhosin/book.xml b/reference/suhosin/book.xml new file mode 100644 index 0000000000..c85b59b626 --- /dev/null +++ b/reference/suhosin/book.xml @@ -0,0 +1,43 @@ + + + + + Suhosin extension + Suhosin + + + &reftitle.intro; + + + Suhosin is an advanced protection system for PHP installations. It was + designed to protect servers and users from known and unknown flaws in PHP + applications and the PHP core. + + + + &reference.suhosin.setup; + &reference.suhosin.constants; + &reference.suhosin.reference; + + + + diff --git a/reference/suhosin/configure.xml b/reference/suhosin/configure.xml new file mode 100644 index 0000000000..895649f92e --- /dev/null +++ b/reference/suhosin/configure.xml @@ -0,0 +1,38 @@ + + + +
+ &reftitle.install; + + + Some Linux distributions have Suhosin packages. There are also detailed installation instructions. + + + + There is no official Windows release. + + +
+ + + diff --git a/reference/suhosin/constants.xml b/reference/suhosin/constants.xml new file mode 100644 index 0000000000..d7263f7d69 --- /dev/null +++ b/reference/suhosin/constants.xml @@ -0,0 +1,151 @@ + + + + + &reftitle.constants; + &extension.constants; + + + + S_MEMORY + (integer) + + + + + + + + + + S_VARS + (integer) + + + + + + + + + + S_FILES + (integer) + + + + + + + + + + S_INCLUDE + (integer) + + + + + + + + + + S_SQL + (integer) + + + + + + + + + + S_EXECUTOR + (integer) + + + + + + + + + + S_MAIL + (integer) + + + + + + + + + + S_SESSION + (integer) + + + + + + + + + + S_MISC + (integer) + + + + + + + + + + S_INTERNAL + (integer) + + + + + + + + + + S_ALL + (integer) + + + + + + + + + + + diff --git a/reference/suhosin/functions/sha256-file.xml b/reference/suhosin/functions/sha256-file.xml new file mode 100644 index 0000000000..989988642e --- /dev/null +++ b/reference/suhosin/functions/sha256-file.xml @@ -0,0 +1,95 @@ + + + + + + sha256_file + Calculate the sha256 hash of given filename + + + + &reftitle.description; + + stringsha256_file + stringfilename + boolraw_output + + + + + + + + + &reftitle.parameters; + + + + filename + + + Name of the file. + + + + + raw_output + + + Whether to return raw binary format (32 bytes). + + + + + + + + + &reftitle.returnvalues; + + Returns the hash&return.falseforfailure;. + + + + + &reftitle.notes; + + + This function is available only with Suhosin extension. You can also use + hash_file function with "sha256" algorithm. + + + + + + &reftitle.seealso; + + + sha256 + hash_file + + + + + + + diff --git a/reference/suhosin/functions/sha256.xml b/reference/suhosin/functions/sha256.xml new file mode 100644 index 0000000000..75846cd2cd --- /dev/null +++ b/reference/suhosin/functions/sha256.xml @@ -0,0 +1,95 @@ + + + + + + sha256 + Calculate the sha256 hash of a string + + + + &reftitle.description; + + stringsha256 + stringstr + boolraw_output + + + + + + + + + &reftitle.parameters; + + + + str + + + The string. + + + + + raw_output + + + Whether to return raw binary format (32 bytes). + + + + + + + + + &reftitle.returnvalues; + + Returns the hash&return.falseforfailure;. + + + + + &reftitle.notes; + + + This function is available only with Suhosin extension. You can also use + hash function with "sha256" algorithm. + + + + + + &reftitle.seealso; + + + sha256_file + hash + + + + + + + diff --git a/reference/suhosin/functions/suhosin-encrypt-cookie.xml b/reference/suhosin/functions/suhosin-encrypt-cookie.xml new file mode 100644 index 0000000000..3d4ff782b4 --- /dev/null +++ b/reference/suhosin/functions/suhosin-encrypt-cookie.xml @@ -0,0 +1,78 @@ + + + + + + suhosin_encrypt_cookie + Encrypts a cookie value according to current cookie encrpytion setting + + + + &reftitle.description; + + stringsuhosin_encrypt_cookie + stringname + stringvalue + + + + + + &warn.undocumented.func; + + + + + &reftitle.parameters; + + + + name + + + Cookie name. + + + + + value + + + Cookie value. + + + + + + + + + &reftitle.returnvalues; + + Returns the encrypted string&return.falseforfailure;. + + + + + + + diff --git a/reference/suhosin/functions/suhosin-get-raw-cookies.xml b/reference/suhosin/functions/suhosin-get-raw-cookies.xml new file mode 100644 index 0000000000..3efd51455f --- /dev/null +++ b/reference/suhosin/functions/suhosin-get-raw-cookies.xml @@ -0,0 +1,58 @@ + + + + + + suhosin_get_raw_cookies + Returns an array containing the raw cookie values + + + + &reftitle.description; + + arraysuhosin_get_raw_cookies + + + + + + + &warn.undocumented.func; + + + + + &reftitle.parameters; + &no.function.parameters; + + + + &reftitle.returnvalues; + + Returns an array containing the raw cookie values. + + + + + + + diff --git a/reference/suhosin/ini.xml b/reference/suhosin/ini.xml new file mode 100644 index 0000000000..bb4687fbf2 --- /dev/null +++ b/reference/suhosin/ini.xml @@ -0,0 +1,1726 @@ + + + +
+ &reftitle.runtime; + &extension.runtime; + + + Suhosin &ConfigureOptions; + + + + &Name; + &Default; + &Changeable; + &Changelog; + + + + + suhosin.log.syslog + + PHP_INI_PERDIR + + + + suhosin.log.syslog.facility + + PHP_INI_PERDIR + + + + suhosin.log.syslog.priority + + PHP_INI_PERDIR + + + + suhosin.log.sapi + 0 + PHP_INI_PERDIR + + + + suhosin.log.script + 0 + PHP_INI_PERDIR + + + + suhosin.log.script.name + + PHP_INI_PERDIR + + + + suhosin.log.use-x-forwarded-for + 0 + PHP_INI_PERDIR + + + + suhosin.log.phpscript + 0 + PHP_INI_PERDIR + + + + suhosin.log.phpscript.name + + PHP_INI_PERDIR + + + + suhosin.log.file + 0 + PHP_INI_PERDIR + + + + suhosin.log.file.name + + PHP_INI_PERDIR + + + + suhosin.log.phpscript.is_safe + 0 + PHP_INI_PERDIR + + + + suhosin.perdir + 0 + PHP_INI_SYSTEM + + + + suhosin.executor.include.max_traversal + 0 + PHP_INI_PERDIR + + + + suhosin.executor.include.whitelist + + PHP_INI_PERDIR + + + + suhosin.executor.include.blacklist + + PHP_INI_PERDIR + + + + suhosin.executor.include.allow_writable_files + 1 + PHP_INI_PERDIR + + + + suhosin.executor.eval.whitelist + + PHP_INI_PERDIR + + + + suhosin.executor.eval.blacklist + + PHP_INI_PERDIR + + + + suhosin.executor.func.whitelist + + PHP_INI_PERDIR + + + + suhosin.executor.func.blacklist + + PHP_INI_PERDIR + + + + suhosin.executor.disable_eval + 0 + PHP_INI_PERDIR + + + + suhosin.executor.disable_emodifier + 0 + PHP_INI_PERDIR + + + + suhosin.executor.allow_symlink + 0 + PHP_INI_PERDIR + + + + suhosin.executor.max_depth + 0 + PHP_INI_PERDIR + + + + suhosin.multiheader + 0 + PHP_INI_PERDIR + + + + suhosin.mail.protect + 0 + PHP_INI_PERDIR + + + + suhosin.memory_limit + 0 + PHP_INI_PERDIR + + + + suhosin.simulation + 0 + PHP_INI_PERDIR + + + + suhosin.filter.action + + PHP_INI_PERDIR + + + + suhosin.protectkey + 1 + PHP_INI_SYSTEM + + + + suhosin.coredump + 0 + PHP_INI_SYSTEM + + + + suhosin.stealth + 1 + PHP_INI_SYSTEM + + + + suhosin.apc_bug_workaround + 0 + PHP_INI_SYSTEM + + + + suhosin.disable.display_errors + 0 + PHP_INI_SYSTEM + + + + suhosin.request.max_vars + 1000 + PHP_INI_PERDIR + + + + suhosin.request.max_varname_length + 64 + PHP_INI_PERDIR + + + + suhosin.request.max_value_length + 1000000 + PHP_INI_PERDIR + + + + suhosin.request.max_array_depth + 50 + PHP_INI_PERDIR + + + + suhosin.request.max_totalname_length + 256 + PHP_INI_PERDIR + + + + suhosin.request.max_array_index_length + 64 + PHP_INI_PERDIR + + + + suhosin.request.disallow_nul + 1 + PHP_INI_PERDIR + + + + suhosin.request.disallow_ws + 0 + PHP_INI_PERDIR + + + + suhosin.cookie.max_vars + 100 + PHP_INI_PERDIR + + + + suhosin.cookie.max_name_length + 64 + PHP_INI_PERDIR + + + + suhosin.cookie.max_totalname_length + 256 + PHP_INI_PERDIR + + + + suhosin.cookie.max_value_length + 10000 + PHP_INI_PERDIR + + + + suhosin.cookie.max_array_depth + 50 + PHP_INI_PERDIR + + + + suhosin.cookie.max_array_index_length + 64 + PHP_INI_PERDIR + + + + suhosin.cookie.disallow_nul + 1 + PHP_INI_PERDIR + + + + suhosin.cookie.disallow_ws + 1 + PHP_INI_PERDIR + + + + suhosin.get.max_vars + 100 + PHP_INI_PERDIR + + + + suhosin.get.max_name_length + 64 + PHP_INI_PERDIR + + + + suhosin.get.max_totalname_length + 256 + PHP_INI_PERDIR + + + + suhosin.get.max_value_length + 512 + PHP_INI_PERDIR + + + + suhosin.get.max_array_depth + 50 + PHP_INI_PERDIR + + + + suhosin.get.max_array_index_length + 64 + PHP_INI_PERDIR + + + + suhosin.get.disallow_nul + 1 + PHP_INI_PERDIR + + + + suhosin.get.disallow_ws + 0 + PHP_INI_PERDIR + + + + suhosin.post.max_vars + 1000 + PHP_INI_PERDIR + + + + suhosin.post.max_name_length + 64 + PHP_INI_PERDIR + + + + suhosin.post.max_totalname_length + 256 + PHP_INI_PERDIR + + + + suhosin.post.max_value_length + 1000000 + PHP_INI_PERDIR + + + + suhosin.post.max_array_depth + 50 + PHP_INI_PERDIR + + + + suhosin.post.max_array_index_length + 64 + PHP_INI_PERDIR + + + + suhosin.post.disallow_nul + 1 + PHP_INI_PERDIR + + + + suhosin.post.disallow_ws + 0 + PHP_INI_PERDIR + + + + suhosin.upload.max_uploads + 25 + PHP_INI_PERDIR + + + + suhosin.upload.disallow_elf + 1 + PHP_INI_PERDIR + + + + suhosin.upload.disallow_binary + 0 + PHP_INI_PERDIR + + + + suhosin.upload.remove_binary + 0 + PHP_INI_PERDIR + + + + suhosin.upload.verification_script + + PHP_INI_PERDIR + + + + suhosin.sql.bailout_on_error + 0 + PHP_INI_PERDIR + + + + suhosin.sql.user_prefix + + PHP_INI_PERDIR + + + + suhosin.sql.user_postfix + + PHP_INI_PERDIR + + + + suhosin.sql.comment + 0 + PHP_INI_PERDIR + + + + suhosin.sql.opencomment + 0 + PHP_INI_PERDIR + + + + suhosin.sql.multiselect + 0 + PHP_INI_PERDIR + + + + suhosin.sql.union + 0 + PHP_INI_PERDIR + + + + suhosin.session.encrypt + 1 + PHP_INI_PERDIR + + + + suhosin.session.cryptkey + + PHP_INI_PERDIR + + + + suhosin.session.cryptua + 0 + PHP_INI_PERDIR + + + + suhosin.session.cryptdocroot + 1 + PHP_INI_PERDIR + + + + suhosin.session.cryptraddr + 0 + PHP_INI_PERDIR + + + + suhosin.session.checkraddr + 0 + PHP_INI_PERDIR + + + + suhosin.session.max_id_length + 128 + PHP_INI_PERDIR + + + + suhosin.cookie.encrypt + 0 + PHP_INI_PERDIR + + + + suhosin.cookie.cryptkey + + PHP_INI_ALL + + + + suhosin.cookie.cryptua + 1 + PHP_INI_PERDIR + + + + suhosin.cookie.cryptdocroot + 1 + PHP_INI_PERDIR + + + + suhosin.cookie.cryptraddr + 0 + PHP_INI_PERDIR + + + + suhosin.cookie.checkraddr + 0 + PHP_INI_PERDIR + + + + suhosin.cookie.cryptlist + + PHP_INI_PERDIR + + + + suhosin.cookie.plainlist + + PHP_INI_PERDIR + + + + suhosin.server.encode + 1 + PHP_INI_PERDIR + + + + suhosin.server.strip + 1 + PHP_INI_PERDIR + + + + suhosin.srand.ignore + 1 + PHP_INI_PERDIR + + + + suhosin.mt_srand.ignore + 1 + PHP_INI_PERDIR + + + + +
+
+ + &ini.descriptions.title; + + + + + + suhosin.log.syslog + string + + + + + + + + + + suhosin.log.syslog.facility + string + + + + + + + + + + suhosin.log.syslog.priority + string + + + + + + + + + + suhosin.log.sapi + integer + + + + + + + + + + suhosin.log.script + integer + + + + + + + + + + suhosin.log.script.name + string + + + + + + + + + + suhosin.log.use-x-forwarded-for + integer + + + + + + + + + + suhosin.log.phpscript + integer + + + + + + + + + + suhosin.log.phpscript.name + string + + + + + + + + + + suhosin.log.file + integer + + + + + + + + + + suhosin.log.file.name + string + + + + + + + + + + suhosin.log.phpscript.is_safe + integer + + + + + + + + + + suhosin.perdir + integer + + + + + + + + + + suhosin.executor.include.max_traversal + integer + + + + + + + + + + suhosin.executor.include.whitelist + string + + + + + + + + + + suhosin.executor.include.blacklist + string + + + + + + + + + + suhosin.executor.include.allow_writable_files + integer + + + + + + + + + + suhosin.executor.eval.whitelist + string + + + + + + + + + + suhosin.executor.eval.blacklist + string + + + + + + + + + + suhosin.executor.func.whitelist + string + + + + + + + + + + suhosin.executor.func.blacklist + string + + + + + + + + + + suhosin.executor.disable_eval + integer + + + + + + + + + + suhosin.executor.disable_emodifier + integer + + + + + + + + + + suhosin.executor.allow_symlink + integer + + + + + + + + + + suhosin.executor.max_depth + integer + + + + + + + + + + suhosin.multiheader + integer + + + + + + + + + + suhosin.mail.protect + integer + + + + + + + + + + suhosin.memory_limit + integer + + + + + + + + + + suhosin.simulation + integer + + + + + + + + + + suhosin.filter.action + string + + + + + + + + + + suhosin.protectkey + integer + + + + + + + + + + suhosin.coredump + integer + + + + + + + + + + suhosin.stealth + integer + + + + + + + + + + suhosin.apc_bug_workaround + integer + + + + + + + + + + suhosin.disable.display_errors + integer + + + + + + + + + + suhosin.request.max_vars + integer + + + + + + + + + + suhosin.request.max_varname_length + integer + + + + + + + + + + suhosin.request.max_value_length + integer + + + + + + + + + + suhosin.request.max_array_depth + integer + + + + + + + + + + suhosin.request.max_totalname_length + integer + + + + + + + + + + suhosin.request.max_array_index_length + integer + + + + + + + + + + suhosin.request.disallow_nul + integer + + + + + + + + + + suhosin.request.disallow_ws + integer + + + + + + + + + + suhosin.cookie.max_vars + integer + + + + + + + + + + suhosin.cookie.max_name_length + integer + + + + + + + + + + suhosin.cookie.max_totalname_length + integer + + + + + + + + + + suhosin.cookie.max_value_length + integer + + + + + + + + + + suhosin.cookie.max_array_depth + integer + + + + + + + + + + suhosin.cookie.max_array_index_length + integer + + + + + + + + + + suhosin.cookie.disallow_nul + integer + + + + + + + + + + suhosin.cookie.disallow_ws + integer + + + + + + + + + + suhosin.get.max_vars + integer + + + + + + + + + + suhosin.get.max_name_length + integer + + + + + + + + + + suhosin.get.max_totalname_length + integer + + + + + + + + + + suhosin.get.max_value_length + integer + + + + + + + + + + suhosin.get.max_array_depth + integer + + + + + + + + + + suhosin.get.max_array_index_length + integer + + + + + + + + + + suhosin.get.disallow_nul + integer + + + + + + + + + + suhosin.get.disallow_ws + integer + + + + + + + + + + suhosin.post.max_vars + integer + + + + + + + + + + suhosin.post.max_name_length + integer + + + + + + + + + + suhosin.post.max_totalname_length + integer + + + + + + + + + + suhosin.post.max_value_length + integer + + + + + + + + + + suhosin.post.max_array_depth + integer + + + + + + + + + + suhosin.post.max_array_index_length + integer + + + + + + + + + + suhosin.post.disallow_nul + integer + + + + + + + + + + suhosin.post.disallow_ws + integer + + + + + + + + + + suhosin.upload.max_uploads + integer + + + + + + + + + + suhosin.upload.disallow_elf + integer + + + + + + + + + + suhosin.upload.disallow_binary + integer + + + + + + + + + + suhosin.upload.remove_binary + integer + + + + + + + + + + suhosin.upload.verification_script + string + + + + + + + + + + suhosin.sql.bailout_on_error + integer + + + + + + + + + + suhosin.sql.user_prefix + string + + + + + + + + + + suhosin.sql.user_postfix + string + + + + + + + + + + suhosin.sql.comment + integer + + + + + + + + + + suhosin.sql.opencomment + integer + + + + + + + + + + suhosin.sql.multiselect + integer + + + + + + + + + + suhosin.sql.union + integer + + + + + + + + + + suhosin.session.encrypt + integer + + + + + + + + + + suhosin.session.cryptkey + string + + + + + + + + + + suhosin.session.cryptua + integer + + + + + + + + + + suhosin.session.cryptdocroot + integer + + + + + + + + + + suhosin.session.cryptraddr + integer + + + + + + + + + + suhosin.session.checkraddr + integer + + + + + + + + + + suhosin.session.max_id_length + integer + + + + + + + + + + suhosin.cookie.encrypt + integer + + + + + + + + + + suhosin.cookie.cryptkey + string + + + + + + + + + + suhosin.cookie.cryptua + integer + + + + + + + + + + suhosin.cookie.cryptdocroot + integer + + + + + + + + + + suhosin.cookie.cryptraddr + integer + + + + + + + + + + suhosin.cookie.checkraddr + integer + + + + + + + + + + suhosin.cookie.cryptlist + string + + + + + + + + + + suhosin.cookie.plainlist + string + + + + + + + + + + suhosin.server.encode + integer + + + + + + + + + + suhosin.server.strip + integer + + + + + + + + + + suhosin.srand.ignore + integer + + + + + + + + + + suhosin.mt_srand.ignore + integer + + + + + + + + + + + + + There is a detailed description of configuration + directives on the project's web. + + +
+ + diff --git a/reference/suhosin/reference.xml b/reference/suhosin/reference.xml new file mode 100644 index 0000000000..34526e9928 --- /dev/null +++ b/reference/suhosin/reference.xml @@ -0,0 +1,30 @@ + + + + + Suhosin &Functions; + + &reference.suhosin.entities.functions; + + + + diff --git a/reference/suhosin/setup.xml b/reference/suhosin/setup.xml new file mode 100644 index 0000000000..5bbedd7428 --- /dev/null +++ b/reference/suhosin/setup.xml @@ -0,0 +1,42 @@ + + + + + &reftitle.setup; + +
+ &reftitle.required; + &no.requirement; +
+ + &reference.suhosin.configure; + + &reference.suhosin.ini; + +
+ &reftitle.resources; + &no.resource; +
+ +
+ + diff --git a/reference/suhosin/versions.xml b/reference/suhosin/versions.xml new file mode 100644 index 0000000000..9f45670a1a --- /dev/null +++ b/reference/suhosin/versions.xml @@ -0,0 +1,34 @@ + + + + + + + + + + + + +