Translations:Manual:Security/109/en

If at all possible, make the directory writable only by the web server's account, don't make the directory world-writable.