I know that there are several ways to do this, but I thought that I would fish for a best practice. So, the temporary image directory needs to be readable by everyone and rw by the cgi/apache. One can set the directory rights to 777, but that may be too open. Do most people create groups and tighten it down that way? David.