I have a site that will need to store file uploads by the user once logged in. Currently I have a folder with permissions opened up, (777), because that was the only way I could get mkdir() to work. When the user uploads a file, the application creates several directories based on the user, in this directory then eventually stores the file.
Couple of questions:
How do I setup the permissions on each of these folders and sub folders so that only logged in users to my site have access to them? Is this even possible?
Is there a more secure way of storing .pdf, word docs, and text files?