Hello.

I want to find out if I am on the right track.

My script uploads files to the directory "images". The directory has this setup:

• owner/group = www-data
• Permissions = 700

Questions:

• Is this a good way to secure the directory from a hacker uploading files?
• Will the hacker be able to upload the files directly to the directory?

Note: I have a bunch of other security measures in my upload script + an .htaccess script in the directory that disables script Execution. I just what to know if the permissions on the directory is sensible.

I run apache 2.2