note 36479 added to security.filesystem

Many free webhosting (with php enabled) Apache<2 servers allocates for each user a dir in wwwroot/. This is a huge security hole since any user can run a script (on his dir) that read the other ones scripts with a simple highlight_file("../NotMine/file.php") for example, since Apache user can access all of them. Yes i know there are some directives such open_dir (but it's default on 'any' or safe_mode (which is not a solution). Apache 2 has for each vhost an user and this is a solution but how it remains w/ Apache 1.3? Is there a solution or not (with the schema i mentioned above) What do u think guys? ---- Manual Page -- http://www.php.net/manual/en/security.filesystem.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+36479 Delete -- http://master.php.net/manage/user-notes.php?action=delete+36479&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+36479&report=yes Search -- http://master.php.net/manage/user-notes.php