in reply to Re^2: Phishing question
in thread Phishing question

If you are running php scripts from that directory, it is a scripting directory. Additionally, the same statement can be made about any directory that a browser can access directly through the web server. Basically, if the web server can write anywhere you don't explicitly tell it to, it is a problem.

--MidLifeXis