Logical operators should be avoided
PHP configuration should not be changed dynamically
Files should not be executable
The EntityManager should not be flushed within a loop