PHP as apache module and security.

Hello! Recently someone asked how to ensure that no one will read pas­ sword from php file. The only response I noticed was to create group and add apache user (often nobody) to that group. I consi­ dered this and I can not see what would stop other users from writing php script (run also as nobody) which reads filesystem with permissions of apache? Is there a method of making php as module really secure? Regards, Andrzej -- http://kokosz.horyzont.net http://www.earthdawn.pl