I generally propose implementing up no less than these guidelines from the security guideline: #2: Secure Php with php's disable_functions When you select Severity B you affirm that The problem has average impact in your business with loss and degradation of services, but workarounds permit acceptable, albeit short term, https://www.hostscheap.com/domain-privacy-service