Updated: 28 September 2026 · Applies to: PHP 5 with Suhosin
Suhosin was a security extension for old PHP 5 versions. With it, running PHAR archives (such as Composer) fails with "Suhosin is not properly configured" unless PHAR is allowed.
Fix
Add this to the PHP configuration used by the script:
suhosin.executor.include.whitelist = phar
Current PHP versions do not use Suhosin. If you still see this message, the site runs on an outdated PHP version: move it to a supported version.
