How to defend CSRF (PHP) – NoCSRF How to defend against Clickjacking (PHP) How to remove “x-powered-by” on Apache by PHP How to enable HTTP compression