f1ber sayz "global write in the httpd root dir != good security"