File Upload Security and Permissions

kbowen

We have developed a perl script that allows users to upload files to their workarea. The script is called from a cgi callout on a datacapture.

1.) What would be the best practice to secure this script? Currently, anyone with the URL can access from the httpd/iw-bin directory.

2.) How should permissions be handled when writing the file to the workarea?

We are using TeamSite 5.5.2 on Solaris

Thanks,
Kyle