note 30173 added to security.apache

Well, is this the solution? I have a server with many VHosts. PHP runs in safemode as an Apache-Module. Using suexec, CGIs are generally run under UID of the VHost. PHP is configured on a per-VHost-basis to let people open only their own files: php_admin_value open_basedir "/home/username/" And now the best: Apache runs as user wwwrun and this user is member of all groups, that every vhost is. So nothing needs to be world-readable to be accessed by Apache. Therefore, other users can't read your php-files by CGI and even not by shell-access! What do you think? -- http://www.php.net/manual/en/security.apache.php http://master.php.net/manage/user-notes.php?action=edit+30173 http://master.php.net/manage/user-notes.php?action=delete+30173 http://master.php.net/manage/user-notes.php?action=reject+30173