[sarciszewski]

Also: Reading/writing a user-uploaded file instead of serving it directly can reduce the risk of a malicious file being executed by the server.

(No c99.php.gif for you!)