> Thank you for the answer. > > I am running my site on a shared server, but I can overwrite the options > in the php.ini file. Unfortunately php runs as my user, so changing the > permissions to 644 doesn't work, php is still able to write anything. > > Gabor > ok.. your hosting enable the php suexec. i afraid there is not much you can do to modified the php.ini. you may use ini_set() or the .htaccess to override the value anyway. one thing you can do. sanitize input and make sure you code good :p