So.. WHich is faster? suphp or nobody?

[felosi]

I cant really tell a difference as far as page load, looks just as fast. Just uses a lil extra server resources. And suphp is much more secure for the server as a whole but anyone who gets a shell uploaded to their site - everything can be deleted and all that. But security for the server and the ability to keep a user from using up all resources is gold.

But I have been playing with open_base lately using 5.2.3 php with suhosin and instead of disabling open base for the clients that need it I simply add /usr/bin or usr/local/bin whichever they need to their open base config and it works. So far I havent been able to find any hacks to bypass the open base with the php I have setup but Im sure there is probably something.

So suphp is better in all points for security for the server, uses more resources, and is rumored to be slower.

Nobody - uses less resources, supposed to be faster, but there is always security and to see who is doing what ya know.

What does most people here use? And what config, like max connections, etc

I also like the ability to switch back and forth between suphp and nobody when I have to, doesnt look like it errors on world writable stuff like apache does so that hasnt been an issue.

Just a simple dicussion thread seeing what everyone else thinks