Issue #3328454 by xjm, Bhanu951, jidrone, smustgrave: Replace most strpos() !== FALSE or === FALSE with str_contains()

Issue #3191389 by anmolgoyal74, greggles, larowlan, mcdruid, pwolanin, brayfe: File Inclusion issue security hardening

Issue #2970132 by neerajsingh, webflo: .ht.router.php causes a redirect loop when invoked from parent directory

Issue #1543858 by danquah, pp, alexpott, dawehner, cilefen, jmolivas, esod, jhedstrom, andypost, kenorb, bserem: Add a startup configuration for the built-in PHP server that supports clean URLs