[Dshield] PHP Hardening

[warwick ackfin]

Greetings all,
   Looks like we will be pushing an Apache/PHP/MySql app out into the wild
shortly.  Obviously, such a beast can't go out without something reasonably
robust to protect it from itself.  I started looking into some PHP Hardening
techniques and Suhosin comes recommended by some of our sister/brother
organizations.  Anyone have any thoughts on Suhosin or other PHP hardening
apps/techniques?

http://www.hardened-php.net/suhosin/index.html

Warwick