Hi,

I am using apache commns fileupload to let users to upload their files
to a web site. The web site itself is using https protol, so that the
file is securely uploade through the internet using the HTML form based
uploading process. However, when the file lands on the hard disk of the
web server, it is unencrypted.

My question is that, if my web site is compromised by some attacker,
these files will be exposed to the attacker, is there a way to do the
follows:

1) Make the landed file to be encrypted when it is landing (even for
the temporary file that the fileuploading process written during the
file upload process).

2) Is there any other alternative approach to achieve this, e.g.
another libary I can use to make the downloaded file always to be
encrypted?

Thanks,

David