Apache/PHP and suEXEC, security...

I will make this one as short as possible. :) We use suEXEC. Lots of our servers use these CGI's that write files into their home dirs and stuff. It's also more secure that they run their CGI's as their own user. So, in general, it would be hard to live without. Now, is there a way to have the PHP compiled into Apache notice, "oh, suEXEC is enabled, lets either: a) run our exec/system/passthru calls via suEXEC. b) disable suexec/system/passthru calls unless a value is set." In some ways we rely on CGI's running as the user. We've already had users that have CGI's that write a shitload of files out owned as the www/nobody user to avoid their quota. The joy of an isp environment.... -- Jeffrey H. Johnson, jeff@websitefactory.net The Web Site Factory, http://www.websitefactory.net