This is a suggestion of compilation directive to use when compiling PHP specifically for the audited code.
The selection made below is based on the extension usage, found in the code (--enable, --with) and also the absence of usage (--disable, --without).
Some local extensions (--pdo-mysql, --with-libmbfl...) are also mentionned for help.
# install 2 extra extensions
#pecl install eaccelerator (https://github.com/eaccelerator/eaccelerator)
#pecl install php-psr (https://github.com/jbboehr/php-psr)
;;;;;;;;;;;;;;;;;;;;;;;;
; PHP configure list ;
;;;;;;;;;;;;;;;;;;;;;;;;
./configure
--enable-bcmath
--with-curl=DIR
--enable-eaccelerator
--without-eaccelerator-crash-detection
--without-eaccelerator-optimizer
--without-eaccelerator-info
--without-eaccelerator-doc-comment-inclusion
--with-eaccelerator-disassembler
--with-eaccelerator-debug
--with-eaccelerator-userid
--disable-fileinfo
--with-gd
--with-jpeg-dir=DIR
--with-png-dir=DIR
--with-xpm-dir=DIR
--with-vpx-dir=DIR
--with-freetype-dir=DIR
--enable-gd-native-ttf
--with-imap=DIR
--with-imap-ssl=DIR
--with-kerberos=DIR
--enable-intl
--disable-libxml
--enable-mbstring
--with-libmbfl=DIR
--enable-mbstr-enc-trans
--disable-mbregex
--with-mcrypt=[DIR]
--with-mysqli
--enable-opcache
--with-openssl[=DIR]
--enable-pdo
--with-pdo-odbc
--with-pdo-mysql
--with-pdo-pgsql
--with-pdo-oci
--with-pdo-firebird
--with-pdo-dblib
--with-pdo-cubrid
--disable-posix
--enable-psr
--enable-simplexml
--without-sqlite3
--disable-tokenizer
--disable-xml
--disable-xmlreader
--with-xmlrpc[=DIR]
--disable-xmlwriter
--enable-zip
--with-libzip=DIR
; For debug purposes
;--enable-dtrace
;--disable-phpdbg
;--enable-zend-signals
;--disable-opcache