Which is NOT a good Web security strategy ?

• Remove unnecessary compilers and interpreters
• Add demo programs, so users can test system without accessing production data
• Limit the users who can load software, edit or add files
• Restrict access to the Web server keep a minimum number of ports open