I'm very aware of the benefits of running different websites under different user accounts to limit the damage if a single web application is compromised. I have been instructed to install a wordpress blog on our main corporate domain as a subfolder (example.com/blog) of the domain and not as a subdomain (I believe this is a SEO strategy). I must partition the blog from the main ecommerce site (which has access to our user accounts database), but I can't see a clear way to do it with suexec.
The only thought I have is to install the blog on a separate server and use mod_proxy on the main site as a reverse proxy. However, this means that we would have to maintain the main website template in two separate places (the blog has to be integrated with the main site with the same header, footer etc). If this is the only solution, then it's probably the path I will choose but I would like to know if anyone has any other ideas, it would be greatly appreciated.