Do! Not! Put uploads in static! We made this mistake at a hackathon. Everything worked fine on dev machines, with the unsafe webserver built into flask. When

Do! Not! Put uploads in static! We made this mistake at a hackathon. Everything worked fine on dev machines, with the unsafe webserver built into flask. When we tried to move it to a real server with wsgi, it stopped working. Users shouldn't have write access to the folder your code is in, and by default, they won't!