For security, I create apache user without shell and home directory in my system. And then, I change User directive from daemon to apache in httpd.conf It makes sub processes in apache to run as apache user. But I do not know why apache server still execute my cgi shell script with apache user without shell.
Thank in advance.
P/S: Sorry about grammar mistakes in my post . My English is not good. I am studying English to improve it.