By default, the iFolder server stores the database and user files under the /<data path>/simias directory. The Apache Server user wwwrun by default owns those files. You must use every precaution to avoid inadvertently assign rights to unauthorized users.