[mistwang]

I think that you cannot get what you want from any web server. CGI will work like that, you have to limit the access with file system permission if you want.
If Perl internal does not limit exec() and system(), nobody can.