Secure a web-accessible upload directory
Hi,
I have a site running Linux/Apache/PHP that users can uploads photos to
a directory within the webroot. The only way that I have been able to
get the upload to work is if I chmod the upload directory to 777. The
site is running at a shared hosting provider so I don't have access as
to who apache and/or PHP is running under, but I assume nobody. How
can I get the upload to work while not exposing the directory as a huge
security hole?
Thanks in advance.
|