I would like to know the risks of a python script that is outside of public_html
application/scripts/myscript.py
public_html
This script is called by the php application asynchronously. it receives an argument that determines which file folder will be deleted after x minutes and after update the mysql database
The folder that contains this script has 700 permisions and the owner is www-data. myscript.py has 700 permisions too
Can someone execute this script remotely? or maybe pass some python instruction? How could I prevent from potential risks?
I'm newbie, and I would like to learn.