PHP - totally insecure!

I am runnig apache as"nobody" and have tried to configure PHP security, I have disabled all hard functions like exec() system() ... etc.

But still anyone can read other users file by simple fopen("/home/anyuser/www/config.php") and
fread("/home/anyuser/www/config.php")


It there anyway to stop such issues ? Or the only way is to switch to phpsuexec ?

 

 

 

 

Top