Skip to content

Released

Howdah 1.3.0 is released — Layer 1 (request-shape limits) plus Layer 2 (input inspection, log-only). Howdah starts in detect mode: the critical limits block, everything else only logs. Read the coverage table for exactly what has been tested on your PHP version before you switch rules to block.

Home / Docs

Documentation

Everything you need to install Howdah, configure its rules, read its logs, and roll it back.

Install & verify
The picker builds the exact apt/yum/tarball commands for your OS, PHP source, version and server type, with verify and rollback.
Configuration & rules
The TOML file, every howdah.* setting, the full rule reference with defaults and severity, and the JSON log format.
Config editor
Build howdah.ini and howdah.toml from a form, validated by the extension's own parser, then copy, download or fetch the file with curl.
Troubleshooting & FAQ
“Loaded in CLI but not FPM”, detect vs block, upgrading and uninstalling, and common questions.
Coverage
Exactly which PHP versions and server types have been tested, generated from the lab matrix.

Reference in the repository

The documentation on this site is drawn from the source-of-truth docs in the repository, which are versioned with the code:

docs/config.md — configuration and rule reference
docs/coverage.md — coverage in prose
docs/coverage-data.md — the memory measurements behind the default limits
docs/install-repos.md — apt/yum repository install
Security policy — how to report a vulnerability