Hello, You could always look into the setuid CGI Apache Module. This makes its alot easier to track and administrate CGI scripts since they run as the user that owns them. So you could then restrict processer time and number of forks the user could have since the scripts are no longer running as nobody. This has its down falls with with security though, since the scripts now run as a real person. Hope this helps.