moved stuff to php5 from wordpress (which is now in misc)
cgi.fix_pathinfo=1 poses a security risk