Linux is wisely reminding you that the web server user (which owns the web server processes) should not be writing to people's home directories. You need some kind of a facade between the web interface and the writing of the files. That facade needs to be primarily concerned with security.

Phil