When PHP is used as an Apache module it inherits Apache's user permissions (typically those of the "nobody" user).