Anything that can be written to and executed from the Internet will be a security issue. The only thing your public facing web server should be able to write to

Anything that can be written to and executed from the Internet will be a security issue. The only thing your public facing web server should be able to write to is the log file.