PHP as CGI and suEXEC

Hello, I'd like to have more documentation and explanations on how to run PHP very safely as CGI using suEXEC. There's very little documentation and the only experience I have is the www.free.fr webmaster who installed PHP3 with suEXEC on perso.free.fr (he used some cgi-wrappers). I'm a high school webmaster but I'm not root on the server. I have to deal with a pre-installed suexec. I've been running Apache this way for 2 years (suexec). Even compiled as a CGI, PHP keeps on seing Apache owner informations with <?phpinfo()?>. So, how can I run PHP safely ? Is it possible to keep files without cgi extensions (php, php3, phtml) so that you don't have to indicate the php path (/usr/local/bin/php for example) ? Thanks. PS: I ask this in the PHP4 mailing-list to make sure this would be more documented or being worked on. :) -- Olivier Cahagne snina@ambafrance.org olivier.cahagne@epita.fr Tel: (613) 593 7406 Ambassade de France au Canada Service Culturel 464, Wilbrod St. K1N 6M8, Ottawa, Ontario, Canada