PHP5 is enabled on the server, but it's quite restricted because of the voulnurable nature of PHP. PHP is run in safemode and uses suPHP. Apache server uses mod_security to prevent some further attacks. Ask if you need more details about the configuration.