Best place to put user uploaded files.

Ok, this is what I'm doing.
In /public: preview.php

PHP Code:

<?php
 header("Content-Type: image/bmp");
 header("Content-Length: " . filesize("/var/www/html/sites/example.com/writable/users/".$_GET['path']));
 $fp = fopen("/var/www/html/sites/example.com/writable/users/".$_GET['path'], 'rb');
 fpassthru($fp);
?>

In my view.php file:

Code:

<img src="https://example.com/preview.php?path=<?php echo $userid;?>/image.bmp">

This is probably not best practice, but, security-wise, I can't see it being less secure than simply specifying the url of the image directly in the src of the img tag.

~ Dave