The upload directory has to be set to read/write/execute for everyone(777) in order for it to work. Does this sound right? What can I do to protect this directory? How can people get into this directory and mess with my files if they don't have account username and pw info?
thanks.
