I wasn't even going to touch the race condition! Good catch on the chown thing. Whole thing is a mess. And I guess the web server is running as root?? No evidence sudo is being used. Very, very risky.