Îïöèÿ

Çíà÷åíèå ïî óìîë÷àíèþ

 

Âîçìîæíûå çíà÷åíèÿ

 

Ïîÿñíåíèå

Îïöèè ïðîòîêîëèðîâàíèÿ

 

 

suhosin.log.syslog

 

 

S_ALL (511)

S_MEMORY, S_MISC, S_VARS, S_FILES, S_INCLUDE, S_SQL, S_EXECUTOR, S_MAIL, S_SESSION, S_ALL

 

 

Óêàçûâàåò,  êàêèå êëàññû òðåâîã ðåãèñòðèðóþòñÿ  â syslog. Âíå çàâèñèìîñòè îò íàñòðîåê S_MEMORY ðåãèñòðèðóåòñÿ âñåãäà

 

 

 

suhosin.log.syslog.facility

 

 

 

LOG_USER (9)

LOG_KERN, LOG_USER, LOG_MAIL,LOG_DAEMON, LOG_AUTH,LOG_SYSLOG, LOG_LPR, LOG_NEWS, LOG_UUCP, LOG_CRON, LOG_AUTHPRIV, LOG_LOCAL0 ... LOG_LOCAL7

 

 

 

Óêàçûâàåò íà êîìïîíåíò, êîòîðûé áóäåò çàíîñèòü ñîîáùåíèÿ â syslog

 

 

suhosin.log.syslog.priority

 

 

LOG_ALERT (1)

LOG_EMERG, LOG_ALERT, LOG_CRIT, LOG_WARNING, LOG_NOTICE, LOG_INFO, LOG_DEBUG, LOG_ERR

 

 

Ïðèîðèòåò ñîîáùåíèÿ

suhosin.log.sapi

S_ALL

–

Îïðåäåëÿåò,  êàêèå êëàññû òðåâîã ðåãèñòðèðóþòñÿ  ÷åðåç SAPI

 

suhosin.log.script

 

0

 

–

Êàêèå êëàññû òðåâîã áóäóò ðåãèñòðèðîâàòüñÿ  ÷åðåç âíåøíèé  ñêðèïò, S_MEMORY íå ìîæåò ðåãèñòðèðîâàòüñÿ,  òàê êàê åãî ïîÿâëåíèå îçíà÷àåò, ÷òî ïðîöåññ, âîçìîæíî, â íåñòàáèëüíîì ñîñòîÿíèè

 

suhosin.log.phpscript

 

–

 

–

Êàêèå êëàññû òðåâîã áóäóò  ðåãèñòðèðîâàòüñÿ  ÷åðåç PHP-ñêðèïò,  S_MEMORY

òàêæå íå ìîæåò ðåãèñòðèðîâàòüñÿ

 

suhosin.log.script.name

 

–

 

–

Ïîëíûé ïóòü ê âíåøíåìó  ñêðèïòó. Ñêðèïòó  áóäåò ïåðåäàíî  äâà ïàðàìåòðà. Ïåðâûé – êëàññ òðåâîãè â áóêâåííîé íîòàöèè, âòîðîé – ñîîáùåíèå

 

suhosin.log.phpscript.name

 

–

 

–

Ïîëíûé ïóòü ê âíåøíåìó  php-ñêðèïòó.  Åìó áóäåò ïåðåäàíî  äâà ïàðàìåòðà: SUHOSIN_ERRORCLASS è SUHOSIN_ERROR, íàçíà÷åíèå êîòîðûõ àíàëîãè÷íî ïðåäûäóùåìó

 

suhosin.log.use-x-forwarded-for

 

0 (îòêëþ÷åíî)

 

–

Îáû÷íî IP-àäðåñ àòàêóþùåãî èçâëåêàåòñÿ èç ïåðåìåííîé REMOTE_ADDR, âêëþ÷åíèå ýòîé îïöèè ïîçâîëèò èñïîëüçîâàòü HTTP-çàãîëîâîê X-Forwarded-For (íàïðèìåð, èñïîëüçóåòñÿ ïðîêñè)

Îïöèè èñïîëíåíèÿ

 

suhosin.executor.max_depth

 

0 (îòêëþ÷åíî)

 

–

Çàäàåò ìàêñèìàëüíî ðàçðåøåííóþ ãëóáèíó ñòåêà, ïîñëå ÷åãî âûïîëíåíèå ñêðèïòà áóäåò îñòàíîâëåíî

suhosin.executor.include.max_traversal

0

–

Îïðåäåëÿåò,  ñêîëüêî çíàêîâ ../ â çàïðîñå áóäåò ðàñöåíåíî êàê àòàêà

 

suhosin.executor.include.whitelist

 

–

 

–

Ðàçäåëåííûé  çàïÿòîé ñïèñîê ðàçðåøåííûõ  èëè çàïðåùåííûõ  URL,  êîòîðûå ìîæíî âêëþ÷èòü â ñêðèïò. Åñëè íå óêàçàí áåëûé ñïèñîê, èñïîëüçóåòñÿ òîëüêî ÷åðíûé, åñëè íå óêàçàíû îáà, òî âñòàâêà URL çàïðåùåíà

suhosin.executor.include.blacklist

–

–

 

 

suhosin.executor.func.whitelist

 

–

 

–

Ñïèñîê ðàçðåøåííûõ èëè çàïðåùåííûõ äëÿ âûçîâà ôóíêöèé. Åñëè áåëûé ñïèñîê ïóñò, àíàëèçèðóåòñÿ  ÷åðíûé, åñëè ïóñòû îáà, òî ôóíêöèè çàïðåùåíû

suhosin.executor.func.blacklist

 

–

 

 

suhosin.executor.eval.whitelist

 

–

 

–

Ñïèñîê ôóíêöèé, ðàçäåëåííûõ çàïÿòîé, êîòîðûå ðàçðåøåíî èëè çàïðåùåíî çàïóñêàòü ïîñðåäñòâîì eval(). Åñëè áåëûé ñïèñîê ïóñò, àíàëèçèðóåòñÿ  ÷åðíûé, åñëè ïóñòû îáà, òî âûçîâ ôóíêöèè ÷åðåç eval() çàïðåùåíî

suhosin.executor.eval.blacklist

–

–

 

 

suhosin.executor.disable_eval

 

0

 

–

Ãëîáàëüíîå îòêëþ÷åíèå èñïîëüçîâàíèÿ eval().  æóðíàëå áóäóò îòîáðàæåíû âñå íàðóøåíèÿ ýòîãî ïðàâèëà, ïîýòîìó ìîæíî îòñëåäèòü âñå ñëó÷àè èñïîëüçîâàíèÿ eval()

 

suhosin.executor.disable_emodifier

 

0

 

–

Ìîäèôèêàòîð /e âíóòðè ôóíêöèè preg_replace() ïîçâîëÿåò âûïîëíÿòü êîä, ðàçðàáîò÷èêè ðåêîìåíäóþò îòêëþ÷èòü åå èñïîëüçîâàíèå è ïðèìåíÿòü preg_replace_callback()

Äîïîëíèòåëüíûå îïöèè

 

suhosin.simulation

 

0

 

–

Î÷åíü ïîëåçíàÿ îïöèÿ, ïîçâîëÿåò ïåðåâîäèòü ñèñòåìó â ðåæèì ðåãèñòðàöèè íàðóøåíèé,  òî åñòü ñîçäàâ ïðàâèëà, âû ìîæåòå íåêîòîðîå âðåìÿ òîëüêî ðåãèñòðèðîâàòü íàðóøåíèÿ, ÷òîáû çàòåì êîìïëåêñíî îöåíèòü ðàáîòó ñêðèïòîâ

 

suhosin.mail.protect

 

0

 

0, 1, 2

Âêëþ÷àåò çàùèòó ôóíêöèè mail(). 0 – îòêëþ÷åíà, 1 – êîíòðîëü Subject:, To:,

2 – äîïîëíèòåëüíî To:, CC:, BCC:

 

suhosin.memory_limit

 

0

 

–

Óïðàâëåíèå èçìåíåíèåì memory_limit, ïðè 0 – èçìåíåíèå çàïðåùåíî, ëþáîå ÷èñëî ïîêàçûâàåò ïðåäåë â Ìá, ïðè çàïðîñå ñêðèïòîì áîëüøåãî çíà÷åíèÿ åãî âûïîëíåíèå áóäåò îñòàíîâëåíî

 

Îïöèè ïðîçðà÷íîãî øèôðîâàíèÿ

suhosin.session.encrypt

1 (âêëþ÷åíî)

–

Ðàçðåøåíèå/îòêëþ÷åíèå øèôðîâàíèÿ ñåññèè

suhosin.session.cryptkey

–

–

Êëþ÷ äëÿ øèôðîâàíèÿ ñåññèè

suhosin.session.cryptua

1

 

Çàâèñèìîñòü êëþ÷à øèôðîâàíèÿ îò ïîëåé User-Agent, Documentroot

suhosin.session.cryptdocroot

–

–

 

suhosin.session.cryptraddr

0

0-4

×èñëî îêòåòîâ REMOTE_ADDR, îò êîòîðûõ áóäåò çàâèñèòü êëþ÷ øèôðîâàíèÿ

 

suhosin.cookie.encrypt

 

1

 

–

Øèôðîâàíèå Cookie. Çíà÷åíèå îñòàëüíûõ îïöèé suhosin.cookie.cryptkey, suhosin.cookie.cryptua, suhosin.cookie.cryptdocroot, suhosin.cookie.cryptraddr àíàëîãè÷íî

Îïöèè ôèëüòðàöèè

 

 

suhosin.filter.action

 

 

–

 

 

–

Îïðåäåëÿåò ðåàêöèþ Suhosin íà íàðóøåíèå ôèëüòðîâ. Ïî óìîë÷àíèþ ïåðåìåííàÿ áëîêèðóåòñÿ, 402 – îñòàíàâëèâàåò ñêðèïò è âîçâðàùàåò êîä îòâåòà HTTP  402; [302,]http://www.site.com – ïåðåíàïðàâëÿåò

ïî óêàçàííîìó àäðåñó, â êâàäðàòíûõ ñêîáêàõ ìîæåò ñòîÿòü êîä îòâåòà; [402,]/var/scripts/badguy.php – ïåðåíàïðàâëÿåò íà óêàçàííûé ñêðèïò

suhosin.cookie.max_array_depth

100

–

Ìàêñèìàëüíàÿ ãëóáèíà ìàññèâà, çàðåãèñòðèðîâàííîãî ÷åðåç cookie

 

suhosin.cookie.max_array_index_length

 

64

 

–

Îïðåäåëÿåò ìàêñèìàëüíóþ äëèíó èíäåêñîâ ìàññèâà ïåðåìåííûõ, çàðåãèñòðèðîâàííûõ ÷åðåç cookie

 

suhosin.cookie.max_name_length

 

64

 

–

Îïðåäåëÿåò ìàêñèìàëüíóþ äëèíó èìåíè ïåðåìåííûõ, çàðåãèñòðèðîâàííûõ ÷åðåç cookie. Äëÿ ìàññèâîâ ýòî èìÿ ïåðåä èíäåêñîì

 

suhosin.cookie.max_totalname_length

 

256

 

–

Îïðåäåëÿåò ìàêñèìàëüíóþ äëèíó ïîëíîãî èìåíè ïåðåìåííûõ, çàðåãèñòðèðîâàííûõ ÷åðåç cookie

suhosin.cookie.max_value_length

10000

–

Îïðåäåëÿåò ìàêñèìàëüíóþ äëèíó ïåðåìåííîé, çàðåãèñòðèðîâàííóþ ÷åðåç cookie

 

suhosin.cookie.max_vars

 

100

 

–

Îïðåäåëÿåò ìàêñèìàëüíîå êîëè÷åñòâî ïåðåìåííûõ, çàðåãèñòðèðîâàííûõ ÷åðåç cookie

suhosin.cookie.disallow_nul

1

–

Åñëè 1, òî ñèìâîëû ASCIIZ â ïåðåìåííûõ íå ðàçðåøåíû

 

suhosin.get.max_array_depth

 

50

 

–

Ìàêñèìàëüíàÿ ãëóáèíà ìàññèâà, çàðåãèñòðèðîâàííîãî ÷åðåç URL Çíà÷åíèå îñòàëüíûõ îïöèé (suhosin.get.max_array_index_length, suhosin.get.max_name_length, suhosin.get.max_totalname_length, suhosin.get.max_value_length, suhosin.get.max_vars, suhosin.get.disallow_nul) ñîïîñòàâèìû ñ ïðåäûäóùèìè

 

 

suhosin.post.max_array_depth

 

 

100

 

 

–

Ìàêñèìàëüíàÿ ãëóáèíà ìàññèâà, çàðåãèñòðèðîâàííîãî ÷åðåç POST. Çíà÷åíèå îñòàëüíûõ îïöèé (suhosin.post.max_array_index_length, suhosin.post.max_name_length, suhosin.post.max_totalname_length, suhosin.post.max_value_length, suhosin.post.max_vars, suhosin.post.disallow_nul) ñîïîñòàâèìû   ñ ïðåäûäóùèìè

 

 

suhosin.request.max_array_depth

 

 

100

 

 

–

Ìàêñèìàëüíàÿ ãëóáèíà ìàññèâà, çàðåãèñòðèðîâàííîãî ÷åðåç âñå äîñòóïíûå ìåòîäû URL, GET  , POST  èëè COOKIE.  Ìîæåò áûòü èíäèâèäóàëüíî ïåðåîïðåäåëåíà ïðåäûäóùèìè  îïöèÿìè. Òàêæå äîñòóïíû ïàðàìåòðû suhosin.request.max_array_index_length, suhosin.request.max_totalname_length, suhosin.request.max_value_length, suhosin.request.max_vars, suhosin.request.max_varname_length, suhosin.request.disallow_nul

suhosin.upload.max_uploads

25

–

Ìàêñèìàëüíîå ÷èñëî ôàéëîâ, ïåðåñûëàåìûõ îäíèì çàïðîñîì

suhosin.upload.disallow_elf

1

–

Óñòàíîâêà çàïðåòà íà çàãðóçêó ELF-ôàéëîâ

suhosin.upload.disallow_binary

0

–

Óñòàíîâêà çàïðåòà íà çàãðóçêó äâîè÷íûõ ôàéëîâ

suhosin.upload.remove_binary

0

–

Óñòàíîâêà óäàëåíèÿ äâîè÷íîãî êîíòåíòà èç çàãðóæàåìûõ ôàéëîâ

 

suhosin.upload.verification_script

 

–

 

–

Ïóòü ê ñêðèïòó, êîòîðûé ïðîâåðÿåò  çàãðóæàåìûé  ôàéë.  êà÷åñòâå ïàðàìåòðà îí ïîëó÷èò èìÿ ôàéëà, äëÿ ïðîäîëæåíèÿ çàãðóçêè ñêðèïò äîëæåí âûâåñòè 1

â stdout

 

suhosin.session.max_id_length

 

128

 

–

Ìàêñèìàëüíàÿ äëèíà èäåíòèôèêàòîðà ñåññèè, â ñëó÷àå ïðåâûøåíèÿ óêàçàííîãî çíà÷åíèÿ áóäåò ñîçäàí íîâûé èäåíòèôèêàòîð