note 27085 added to function.system

When having users allowed to run php scripts I found that the webserver being able to read the home-directorys, it allows users to run commands like system("cat /home/auser/connectdb.inc"); as the webserver, thus, all users being able to run scripts can browse eachothers home-directories and finding database-passwords.. how do i get around this? -- http://www.php.net/manual/en/function.system.php http://master.php.net/manage/user-notes.php?action=edit+27085 http://master.php.net/manage/user-notes.php?action=delete+27085 http://master.php.net/manage/user-notes.php?action=reject+27085