diff --git a/src/nhttpd/yhttpd_core/yrequest.cpp b/src/nhttpd/yhttpd_core/yrequest.cpp
index cb07d9720..5f648ea6b 100644
--- a/src/nhttpd/yhttpd_core/yrequest.cpp
+++ b/src/nhttpd/yhttpd_core/yrequest.cpp
@@ -467,7 +467,7 @@ unsigned int CWebserverRequest::HandlePostBoundary(std::string boundary,
 			ParameterList[var_name+"_upload_filename"] = upload_filename;
 
 			// open file for write
-			int fd = open(upload_filename.c_str(), O_WRONLY|O_CREAT|O_TRUNC);
+			int fd = open(upload_filename.c_str(), O_WRONLY|O_CREAT|O_TRUNC, 0644);
 			if (fd<=0)
 			{
 				aprintf("cannot open file %s: ", upload_filename.c_str());