I'm currently building a site linked to my plugin. However, I want to be able to transfer screenshot files from the plugin to my site (using Spout to get screenshots). What's the most secure way of uploading files from my plugin? I've looked around and some people say just authentication is enough, but this leaves the file open to attack. Others have said just post everything to a PHP page within my website. If you have any experience with this I'd really appreciated your help. Edit: A bit more background info, the site is built using PHP, though the VPS it's hosted on can run Java programs. Should I be creating my own Java server to retrieve the files?