Thank you so much, we hadn't noticed we were deliberately creating a directory with 777 permissions. (yes, it is necessary, and yes, it is really necessary, and yes it's absolutely necessary).
Well, maybe you can explain why? This directory is not gonna be accessed by anyone except apache, right?
I would read the RTFM you know, if there was any...
Eric
