attributes of folder to upload files

Anon

I made a form to upload files, and i dont know what attributes to put to the folder, it worked with 777, but does that mean pleople can use FTP to upload because is with write attribute for any user. (without using the form) ?! i think im not right....

thanks

Anon

Well 777 is a bad idea because they could upload executables. Your server probably runs as "nobody" user, so you could try making the upload folder owned by "nobody" and writable/readable by "nobody"

Anon

I can't upload files from a form. How did you do it?

Anon

I would like help on this as well. Can anyone give me a hint?

Luz wrote:

I can't upload files from a form. How did you do it?