I'm just going to add my two cents in here. You should not, ever, at all, depend on PHP's safe mode. It is deprecated, and will be removed in PHP 6. If you cannot secure a server without using safe mode then you shouldn't be running a webhosting company.
Also, open_basedir can provide a lot of...