title: Upload files via FTP - Safety
body: <p>I am working on a website that any member can upload photo for sharing, etc. I am planning to keep the file names in MySQL database and physical file at FTP server which means members will have access to FTP server indirectly. (I keep the FTP, MySQL username and password in config file which is not in the root directory) I created two users for MySQL database one has full access for me the other one which has given in config file for members has restricted access. So I feel safe about my MySQL account.</p>
  
  <p>On the other hand, I am not experienced about FTP accesses. I understand that I can have only one FTP user for one domain and can't restrict access. I do not feel comfortable about giving that information at config file. What should be the normal, safer procedure for members file uploads?</p>