note 31432 added to security.apache

Dear ALL, I find problem on PHP as Apache Modules that with Vhosting, when user upload file by using php upload functions, then user owner and group is www ( which i run apache under user and group www). How i can relsove it? I find the php-cgi is only the solution. As such security bugs will make user under vhosting to keep uploading file out of control. Any solutions? -- http://www.php.net/manual/en/security.apache.php http://master.php.net/manage/user-notes.php?action=edit+31432 http://master.php.net/manage/user-notes.php?action=delete+31432 http://master.php.net/manage/user-notes.php?action=reject+31432