PHP Configuration Module Security Considerations

Question

What are the modules in a PHP configuration that are considered higher risk and should be avoided or additional security steps should be considered when implementing? (All Apache/Nginx/Infrastructure Considerations aside)

Answer 1

If you are worried about your php configuration then you should run PHPSecInfo. If you are worried about sensitive php functionality you should take a look at Exploitable PHP Functions.