Secure apache with php

[Reko Turja]

> I want to secure my Apache/PHP environment...

Full suhosin, both patch and mod for the PHP. IIRC suhosin patch is 
optional in PHP port and the mod can be installed via ports.
(http://www.hardened-php.net/suhosin/index.html)

Apache environment and binaries set up in a jail.

> Which Apache version do you advice?

I reckon these days 2.2 would be the best in regards of future 
upgrades and development.

-Reko