MODX Cloud

The Most Productive MODX Learning Playground Ever

Claim Free Lab Account

MODX and Suhosin

Skip to end of metadata
Go to start of metadata

Known Issues with Suhosin

Suhosin is a PHP extension that adds extra security measures to PHP. One of these, however, is a check to prevent access on a server if a GET variable is too long. This causes issues in the MODX manager in versions equal to or later than 2.2, as MODX uses Google minify to minimize and compress the JavaScript in the manager.

This is remedied in setup/, as during MODX installation, MODX will attempt to find the value of suhosin.get.max_value_length, and if it's lower than 1024, turn off JS compression in the manager.

Recommended Configuration

If the user has suhosin on, and wants JS compression, it is recommended to set the offending param value to a higher limit, such as 4096 or greater. This can be done by editing the php.ini file and restarting the server:

suhosin.get.max_value_length = 4096

In some cases, it may also happen that some functionality doesn't work as expected due to the use of the eval() statement and suhosin blocking that as well. If that happens, you can disable it using the following configuration:

suhosin.executor.disable_eval 0

If you cannot edit the php.ini directly, consult with your host on the best way to set up these configurations. Some hosts might allow changing it through htaccess files, a control panel interface or they can do it for you.

See Also

Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.