web site security separation

[bransom]

What protects one web site on a cpanel server -- or the server itself -- from bad or poor practices (such as php or cgi that has XSS or other vulnerabilities) in another site on the same server? I have a small group of clients (under 2 dozen), only need web and sftp, so unless cpanel offers some form of easy security separation, I'm wondering if I'm better off just using straight apache with virtual sites.
Thanks

 

[cPanelMichael]

Hello

The PHP handler that you use partly contributes to this. You can find documentation on the PHP handlers available at:

Apache PHP Request Handling

Thank you.

 

[ThinIce]

You might find it interesting to read this post

http://forums.cpanel.net/f185/solutions-handling-symlink-attacks-202242-p23.html#post1397221

and understand the thread that it takes place in, which refers to a specific security weakness in the product stack. The 'solution' to this can go all the way back to the kernel, involve third party commercial software or be addressed using new experimental features in cPanel.