This is a suggestion of compilation directive to use when compiling PHP specifically for the audited code.
The selection made below is based on the extension usage, found in the code (--enable, --with) and also the absence of usage (--disable, --without).
Some local extensions (--pdo-mysql, --with-libmbfl...) are also mentionned for help.
# install 3 extra extensions
#pecl install ibm_db2.git (http://git.php.net/?p=pecl/database/ibm_db2.git)
#pecl install sqlsrv (https://pecl.php.net/package/sqlsrv)
#pecl install xdebug (https://pecl.php.net/package/xdebug)
;;;;;;;;;;;;;;;;;;;;;;;;
; PHP configure list ;
;;;;;;;;;;;;;;;;;;;;;;;;
./configure
--disable-ctype
--with-IBM_DB2=[DIR]
--disable-dom
--disable-fileinfo
--disable-filter
--without-iconv
--disable-libxml
--with-mysqli
--with-oci8
--enable-pdo
--with-pdo-odbc
--with-pdo-mysql
--with-pdo-pgsql
--with-pdo-oci
--with-pdo-firebird
--with-pdo-dblib
--with-pdo-cubrid
--without-pear
--disable-posix
--disable-session
--without-sqlite3
--with-sqlsrv=DIR
--disable-tokenizer
--with-xdebug
--disable-xml
--disable-xmlreader
--with-xmlrpc[=DIR]
--disable-xmlwriter
; For debug purposes
;--enable-dtrace
;--disable-phpdbg
;--enable-zend-signals
;--disable-opcache