Some great tips, possibly with the exception of #9 ("Restrict file upload limits for PHP"). I think you'd be better off putting those settings in your php.ini f

Some great tips, possibly with the exception of #9 ("Restrict file upload limits for PHP"). I think you'd be better off putting those settings in your php.ini file, just to promote separation of concerns.