I have read that one of the best things to do for security with user uploaded files is to store them outside of the web folder, as there is very little you can do to ensure that that jpg image the user is uploading is really an upload (MIME can be faked, etc.)
I have not seen a good tutorial on how to achieve this objective, however. I have managed hosting on a linux box, and my web folder is
/public_html/, so how can I save files to
/useruploads/ but still serve up the files using PHP/html?