note 2216 deleted from install.apache by irc-html

I think I finally solved the problem. The solution includes setting "php3_safe_mode on" and "php3_open_basedir './'"in httpd.conf under the <Directory> setting for users www-directory. This takes care of the problem of users accessing files with fopen in PHP. Now for the second problem. I can still login to the server and read the PHP-scripts from the shell. To solve the this I need to make som changes in /etc/group. Everytime I add a new user to the system, I'll give him a group of his own (a group with the same name as his username). I also add the webserver user to this group. Now the webserver can read the user A's PHP-script but user B can't. This solution seems to work, I haven't found any problems with it yet. Please let me know if you do.