Translations:Manual:Image authorization/116/en

Though a web server writable directory is not insecure in itself, it is the first half of a successful attack to your web server.