PHP configuration directives can have significant impact on performance of PHP applications. Make sure that %register_globals% is disabled (default since 4.2.0) Disable %magic_quotes_*% directives. |FF0000|make sure your applications will escape input when necessary| Turn off %expose_php% Turn off %register_argc_argv% for non-cli SAPIs Unless absolutely necessary do not enable %always_populate_raw_post_data%