I'm using Restlet as backend trying to create a small web app.
I am allowing users to upload their profile images, but not sure where to store them. Google tells me to store it in the file system which makes sense.
So should I store them in a public web folder in which the web front end lives? But wouldn't that allow people to access all the profile images very easily?
If i don't store the images in the public web directory, where should I store them and how do I protect them?
My server is Ubuntu server 12.04 thanks in advance