The best solution to this would be the perchild MPM support in mod_perl 2, which would allow requests to go to a process running as a separate user. This would be more secure than PHP's safe mode or Perl's Safe module. However, it isn't operational yet. You can investigate it by looking at the mod_perl documentation, and joining the list.