This question already has an answer here:
I have set the permission on my uploads directory(in which end user can upload their documents) to 777.
I understand this is not a good idea, but the files wont get uploaded with any other permission.
I want to understand the security risks attached to it and what i can do to prevent them.
Additionally, i will be setting the permission on uploaded files in upload dir to 644.
Appreciate your response.