in reply to Installing and securing server
I'll let you read up on this for yourself. See:
perlsec and PHP Safe-mode
Specifically, Taint mode and @INC and Cleaning Up Your Path
HTH.