https://albazy.com/2008/08/apache-and-php-sample-security-configuration/