In Apache's Config: <Directory "/....../upload_dirs"> Options None AllowOverride Options Order allow,deny Allow from all RedirectPermanent * "somewhere else" </Directory> By using that and uploading to the upload_dir via another script, you create a black hole. Stuff comes in but can't be accessed from the outside world afterwards. Wolf kristianto adi widiatmoko wrote: > can any body help me !! > > how to secure folder upload file since the privilege of this folder is 777 > > is any method to create a secure upload file ?? > > Send instant messages to your online friends http://uk.messenger.yahoo.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php