Watch those compiler flags
- • Use non-PIC Apache DSO (gcc -prefer-non-pic) by using --without-pic
- • Use platform-specific gcc flags
- • ./configure --disable-all
Other Changes
- • Plenty of custom extensions and limit RINIT
- • Filter all user data by default
- • No $_COOKIE nor $_ENV for you and use JIT population for $_SERVER
- • Careful use of the session extension
