Is it possible to secure the upload of files to the server using the execution prohibition?

Question

PHP

Good afternoon
I'm looking for the best way to secure the upload of images to the server
While I was looking, I came across many options from the category - to prohibit the execution of scripts in a folder, or upload images to a separate subdomain and again prohibit them from doing anything, or store files outside the site root, etc.
I don't I say that all these options are bad, I just have a question, why can't you just put rights like 644 on it when uploading a file, and that's it?
Yes, all sorts of not good scripts will be lying in the folder, and so on - but you can’t execute them - let them lie
Tell me - where am I wrong?

Answer 1

First, decide what problem you are solving. Who is he trying to protect and why?

Answer 2

You can, in the right folder, create a .htaccess file

<IfModule mod_mime.c>
        RemoveHandler      .php .php3 .php4 .php5 .php6 .phtml .pl .asp .aspx .cgi .dll .exe .shtm .shtml .fcg .fcgi .fpl .asmx .pht
        AddType text/plain .php .php3 .php4 .php5 .php6 .phtml .pl .asp .aspx .cgi .dll .exe .shtm .shtml .fcg .fcgi .fpl .asmx .pht
</IfModule>
<IfModule mod_php5.c>
        php_flag engine off
</IfModule

>