Translations:Manual:Security/161/en

Next you run $code3 to remove write access from all other users besides the file owners. After doing that step you may need to re-enable write access to the images directory.