NYCPHP Meetup

[Ajai Khattri]

David Mintz wrote:

>
>
>I forgot to mention another possible solution. Run in cgi mode under
>php-cgiwrap, so your scripts run as you; then chmod your scripts to 600 so
>others (such as 'nobody' and your fellow hosting customers) can't read
>them.
>

suexec does this too.
The only problem is the performance hit with CGI (not sure if 
mod_fastcgi will help here).

On our new shared web server, for security, no customers have shell 
access ;-)

-- 
Aj.
Systems Administrator / Developer