Comment by _-___________-_

First and foremost, host the hosted script that you let users use on a different domain - especially if you're letting random people upload random files to your primary domain!