Posted by Michael Fesser on 05/30/07 10:20

..oO(user)

>A web site I am looking at has their php support using CGI and claim
>that is for security.
>
>Is this fact or fiction?

Fact. On a shared host using the PHP CGI binary makes it easier to have
all scripts executed under the name and with the access privileges of
their owners. With using the PHP server module usually all scripts run
under the same user name (e.g. "nobody"), which is a security problem.

The drawback of the CGI version is a little performance hit.

Micha

[Back to original message]