Review on Suhosin by Mark Bennett

I like that it's easy enough to configure, but powerful at its best when configured properly (which can be difficult). There are ways of getting around some security measures via misconfiguration - if you're not familiar with what certain things do or how they work this could cause problems down-the road (or even now!). You need someone who knows their stuff before using something as important/critical as SUHOSIN! We use suphp everywhere we have php running our websites so having access control was essential.