PHP configuration directives can have significant impact on performance of PHP applications.
- • Make sure that register_globals is disabled (default since 4.2.0)
- • Disable magic_quotes_* directives.
- • make sure your applications will escape input when necessary
- • Turn off expose_php
- • Turn off register_argc_argv for non-cli SAPIs
- • Unless absolutely necessary do not enable always_populate_raw_post_data