I’m using the great jquery-file-upload image uploader, but need to store images for different users in subfolders. I can do this either by sending the name of the folder as a $_POST arg to upload.class.php or retrieve the name as a $_SESSION arg.
Is there a preference for security?
If the folder name is to be inputted by the user, it should be in a
$_POSTvariable with an appropriate form.If it is a variable to be determined by the server, per user, it should be a
$_SESSIONvariable.There’s no question of security here, there’s a question of which is more appropriate for the required functionality.