Use non-PIC Apache DSO (gcc -prefer-non-pic) by using --without-pic Use platform-specific gcc flags ./configure --disable-all Plenty of custom extensions and limit RINIT Filter all user data by default No $_COOKIE nor $_ENV for you and use JIT population for $_SERVER Careful use of the session extension