(my) PHP security settings

notset

Here is my header file for PHP security

<?php
ini_set('safe_mode', 1);
ini_set('url_rewriter.tags', 0);
ini_set('register_globals', 0);
ini_set('magic_quotes_gpc', 0);
ini_set('open_basedir', dirname(__FILE__).'/');

error_reporting(0);

ob_start();

session_save_path(dirname(__FILE__).'\sessions');
session_name('s');
session_start();
?>

What i need change? What to add?

Thank's for comments.

thorpe

What i need change? What to add?

I wouldn't change a thing. Its perfect! :-P

notset

any more opinions?

Litewebsite

In php.ini you can set php_expose = off. Off = No exposure that you have PHP installed on your server. (PHP manual about php.ini directives )

Weedpacket

I wouldn't have ob_start() there; at least, not as any sort of security measure. It would just be slowing the response down unnecessarily.