Hello,
My first post, and from RCW ;)
I have a first comment on how it manages some problems. Like you guess, I talk about the safe mode's PHP and mail function. When I try to send an e-mail, the Return-Path header is set to the user-apache@hostname email, instead of sender. It is useless, and can waste a lot of time. I propose to remove the ability to send an e-mail with the mail function when safe mode is enable.
I was very surprised when I installed this web application. Great work for a first write !
Regards.