To allow a user to copy a file to your server , do you have to change the permissions on the receiving directory ? To 777?
And if so, what are the security risks of changing the permissions?
If this is a major problem, is there a reduced risk if the allowed file type to be uploaded is limited to image files, e.g. gif? Are there any ways to permit uploading and avoid/reduce security risks?
Thanks