Talk:Gallery2:How do I secure Gallery2

Thanks for contributing these docs. What I'd like to see documented:

How g2data can be secured if you're hosting on a shared webhoster (opposed to dedicated hosting) and if php-cgi is used (as opposed to php as apache / iis module).
How shared webhosting companies should set up their servers (chroot jail + php-fastcgi + apache2 + suexec). (not php as apache module, not safe_mode). Maybe open_basedir.