-\begin{enumerate}[label=5.\arabic*]
+\begin{enumerate}[label={5.\arabic*}]
\item Verify that the runtime environment is not susceptible to buffer
overflows, or that security controls prevent buffer overflows.
+ As of \emph{OWASP}'s statement\footnote{\url{%
+ https://www.owasp.org/index.php/Buffer_Overflows\#Platforms_Affected}}
+ \PHP{} is not surceptible to buffer overflows as long no external
+ programs or extensions are used which is not the case.
% They skip 5.2
\addtocounter{enumi}{1}
\item Verify that server side input validation failures result in