Security

I have built a php-based website for my kids' elementary school, and now need to convince the IT gods at the school district that this php-thing isn't a security risk <grin>... Seriously, I would appreciate any comments or observations people would care to pass along about their experiences with the security of php. FWIW, I always compile it with safe mode enabled (and as a dynamically-loaded module under apache). In my own simple-minded tests I haven't even been able to build a script that deletes files in the html document tree (not even ones with owner/group permissions of rw and owner/group set to nobody/users; which is interesting). Thanx in advance for any feedback. - Mark