PHP Configuration & Security
In "Security Precautions [for] PHP on Apache Servers," Steven Whitney describes in detail the configuration settings for PHP that are effective at blocking the most common types of webserver attacks. The configuration adjustments are few and the rules are pretty simple. There are two files where PHP configuration commands reside: php.ini (preferred) or .htaccess. File php.ini specifies the configuration settings PHP will use when it is running on your website. It determines what things PHP scripts are allowed to do and what they are prohibited from doing.
