note 30173 deleted from security.apache by betz

Note Submitter: Pollux ---- Well, is this the solution? I have a server with many VHosts. PHP runs in safemode as an Apache-Module. Using suexec, CGIs are generally run under UID of the VHost. PHP is configured on a per-VHost-basis to let people open only their own files: php_admin_value open_basedir "/home/username/" And now the best: Apache runs as user wwwrun and this user is member of all groups, that every vhost is. So nothing needs to be world-readable to be accessed by Apache. Therefore, other users can't read your php-files by CGI and even not by shell-access! What do you think?