Installing open_basedir is better. Because a lot of popular scripts (SMF, vBulletin, wordpress, etc) need to read files. And using other functions as david said is just insecure as fopen.
Disabling fopen isn't a good idea at all, if you want to keep your clients Try playing with open_basedir.
█ Fraud Record - Stop Fraud Clients, Report Abusive Customers.
█ Combine your efforts to fight misbehaving clients. █ HarzemDesign - Highest quality, well designed and carefully coded hosting designs. Not cheap though. █ Large and awesome portfolio, just visit and see!