Ownership/permissions of uploaded files
- by Cudos
Hello.
I want to find out if I am on the right track.
My script uploads files to the directory "images". The directory has this setup:
owner/group = www-data
Permissions = 700
Questions:
Is this a good way to secure the directory from a hacker uploading files?
Will the hacker be able to upload the files directly to the directory?
Note:
I have a bunch of other security measures in my upload script + an .htaccess script in the directory that disables script Execution. I just what to know if the permissions on the directory is sensible.
I run apache 2.2