php_value disable_functions file,mail
(in .htaccess, or in a virtualhost or similar container in httpd.conf)
edit: ouch. cant use this in httpd.conf, i was going from memory...
http://us2.php.net/manual/en/feature...able-functions
php.ini only. enjoy.