[NiteWave]

tested with root, also tested with nobody

access it through browser, it runs under lsphp5 user -- nobody.

you can add
out("id");
to confirm it.