Quote:
Remove access to the images directory by either moving it above the root pages of the website, or by modifying the permissions so that it is not globally writeable (this may not be possible with some setups). At the very least, if you do not want users to have direct access to the directory, you should put an .htaccess file into it with the following lines:
But when the users uploads their files, it must be copied to the images directory. When i remove access to that directory means, how the can user do that?