I converted my entire site to PHP, which doesn't really mean much, since it'll render as XHTML to everyone who doesn't have access to my server. But aside from a couple of broken links, it worked straight off: dynamic navigation through a PHP-generated menu, content served from a separate html file, and I've enabled UTF-8 as the default charset in Apache, so my umlauts show up correctly.

I'm currently in the process of securing my web server as much as possible. I've made it so that it isn't immediately obvious that I'm using PHP (although advertising it on the front page probably defeats the purpose of this); I've also installed the security module for Apache, but I need to go through its documentation before I can set it up properly. I've got the latest kernel configured and installed, and I've closed as many security holes as I can think of. Too bad that every system is different, and thus prone to different vulnerabilities. At least my partitioning scheme will give me some cushion in case things get out of control, and I've naturally made backups.