Securing a PHP Installation

In this article we're going to discuss security issues relating to PHP. PHP can be a very powerful and, overall, secure language. That doesn't mean you can just throw caution to the wind, however.
Since PHP is most commonly used as an Apache module, it derives its security model to a large degree from Apache, which, if configured properly, is a very secure environment. In cases where PHP is used as a CGI, this benefit is lost.