myles7073

if i understand correctly 0- move current upload directory to make room for a new upload directory to be created by the php script 1- change the file permissions of the parent directory of the upload directory to 777 2- php script creates new upload directory and sets permissions to 777 so it can upload the images 3- can sudo be used on windows server? also, putting the images there myself defeats the purpose 4- php script finishes uploading images and changes file permission of upload directory back to 755 seems like that still leaves the parent directory of the upload folder wide open to the world ...?

hello all. i'm an aspiring web developer and i'm struggling with a problem that i can't seem to find a specific enough answer to. i have a php application i wrote for a website that allows an employee of the company to upload pictures of artwork into a directory which can be called upon by another application to display those images in a gallery to public visitors of the site. to accomplish this i had to chmod file permissions to 775 which grants write access in that image directory to the world. i understand this is a very bad security problem and i'm curious if there is a relatively simple solution that i haven't been lucky enough to find yet. any help would be very much appreciated.