Reguarding Plesk V2.0 and a Cobalt Raq4 :

How is php configured on each? As a module or CGI?
Also what functions are turned off by default for security reasons?

Are the following functions allowed:

passthru
exec

I do not want my users who write php to write scripts which control the server as the user apache.

How locked down is php in Plesk and on a Raq4?

Thanks,

James