note 17178 added to security.apache

This is a frustrating situation. I am glad to see that I am not the only person who is finding that the single httpd/user solution appears to be the only way to allow access to mod_php with multiple virtual hosts on a site ... the CGI idea is good but then we have the huge performance hit on the server from the fork and execs ... I hope people with other solutions will post here! :) My POP thought the single httpd/user instance was a reasonable workaround for the security issue ... As a reminder for others, do NOT pursue any solutions that involve running Apache as root and trying to then get it drop permissions for each virtual user so that mod_php and other modules cannot read across vhost accounts ... nice theory, BAD practice! -- http://www.php.net/manual/en/security.apache.php http://master.php.net/manage/user-notes.php?action=edit+17178 http://master.php.net/manage/user-notes.php?action=delete+17178 http://master.php.net/manage/user-notes.php?action=reject+17178