[ Thanks to Falko
Timme for this link. ]
“Suhosin comes in two independent parts, that can be
used separately or in combination. The first part is a small patch
against the PHP core, that implements a few low-level protections
against bufferoverflows or format string vulnerabilities and the
second part is a powerful PHP extension that implements all the
other protections.”