I'm using Restlet as backend trying to create a small web app.
I am allowing users to upload their profile images, but not sure where to store them. Google tells me to store it in the file system and store the image path in DB which make sense.
So should I store them in a public web folder in which the web front end lives? But wouldn't that allow people to access all the profile images very easily?
If i don't store the images in the public web directory, where should I store them and how do I protect them?
My server is Ubuntu server 12.04 thanks in advance
BTW any advice on how should I process the images upon upload? I'm trying to convert all formats to png and resize it