I'm sorry if there is already 100 answers out there about this, but they just got me confused. I've a working php-script that allows me to upload images to the webserver when I'm logged in to a CMS. Right now I've 777 permissions to the upload folder and I heard that not very good.
To make it little more safe I'm trying to set the folder permissions to 744 and set the apache server( shared host) to the owner of the folder. Is that sufficient secure?
Then, If I make a folder with PHP:
That should create a folder with those settings, right? But when I tried to delete/change that folder in my ftp-program it worked. How is it that the ftp can change a folder if the apache is the owner?