I want to set it up so that PHP scripts can only read/write files contained in a certain directory and nowhere else on the hard drive (preferably, per virtual host).
I figured I could do this by creating a new (unfortunately, windows) user and restricting its access to all partitions, explicitly allowing access to the folder in question only. That did not work because I couldn't start apache, since it lacks reading permissions. I don't necessarily want to grant the user reading permissions to any location else than it's particular folder. (kind of how web hosting companies do it)
Is there any way I can configure this?