More specifically, make sure to give the web server user access to ONLY the files that you want the WHOLE internet to be able to access.