Same config headache as SuexecUserGroup directive. Everything can be nicely automated with a bash script and Includes to sub configs. As of ~userdir, let them run their web sites, just put proper thresholds and universal cache, like mod_cache, that handles pretty much everything. ITK has some nice thresholds and limits that you can safely adjust. Sincerely, Alexandr Normuradov On 26 October 2011 20:58, Yehuda Katz <yehuda@xxxxxxxxxx> wrote: > On Wed, Oct 26, 2011 at 9:49 PM, Alexandr Normuradov <normalex@xxxxxxxxx> > wrote: >> >> Use MPM ITK. >> Solves security, memory and speed problems. >> Tested in production, very good alternative for environments when >> users are not very savvy and not require custom php.ini > > I use ITK with great results, but it needs to be configured for every > virtual host individually. > I believe the original poster is looking for a solution that will work with > ~userdirs. > I should add that I do not know of any universities that allow students to > run arbitrary code on the primary servers. > At the University of Maryland, you can not run ANY code on the users server > (they used to allow SSI, but that is gone now too) and many departments > require an internal audit of your application before they will let it run on > their servers. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx