We are starting to go in circles again..
"Initializing $path can mitigate this particular risk, but so does disabling register_globals." Against the only vulnerability he mentioned. The person is also talking about a Dedicated project and not a shared environment..
This really isn't what the forum is for. A forum is a place for discussion and not a place for argument. There has only been us two responding to this thread and we are no further on than what we were from the first post. You disagree with our settings, we agree with them.
You have some very simple options.
1. Upgrade to a
VPS Hosting or Dedicated, where you can set your own settings.
2. Open a ticket to billing and ask for a refund on your remaining period.
3. Accept that we know what our settings should and shouldn't be.
Thread closed. Your outstanding technical issues will now only be discussed in ticket form. I urge you not to open yet another thread.