preventing a user to start a process

[David Hogan]

> Unfortunately, that is not possible. E.g. typo3 calls Imagemagick, so I
> need system().

Hmmm ... ok

are you aware you can override many php.ini settings on a per directory
basis or even per vhost basis (I think) ? If you didn't have too many
exceptions, you could deny system() globally, then allow it just for trusted
users or scripts.

Hope this is practical,
Dave