This makes site management easier, makes it easier to determine which user, if any, is sending spam through your server, and makes it much harder for attackers gain a foothold on your server, as the user running a script is limited to being able to only work as that user on files owned by that user, instead of all files managed by apache.
The main advantage of php_cgi is that it runs every php script as it's owner, and creates and modfies files as it's owner.
This makes site management easier, makes it easier to determine which user, if any, is sending spam through your server, and makes it much harder for attackers gain a foothold on your server, as the user running a script is limited to being able to only work as that user on files owned by that user, instead of all files managed by apache.
Jeff
cli (using mod_php) is a lot lighter on system resources. On today's higher power systems it's not as important, and using mod_php (built into apache) apache doesn't need the time or memory overhead to start up another instance of php each time it comes across a php script.why do we have DA set cli as the default?
What about memory usage, is mod_php lighter or heavier (is there a diff between them in terms of memory)?