About Security

[sniperscope]

Hi gurus.

Finally i finished my homepage, but when i check it with some security scanner i got report with over than thousand(and counting) vulnerability because of my upload script.

I used

move_uploaded_file($_FILES['userfile']['tmp_name'][$j],$upload_path . $a)

code to upload an image but for that code i should make my directories CMOD 777.

So, my vulnerable directories are counting up every single user create a profile and upload an image.

Have any serious suggestion ?

 

With my regards