diff --git a/scripts/upload.cgi/upload.cgi b/scripts/upload.cgi/upload.cgi
index 390b8a8..452c715 100644
--- a/scripts/upload.cgi/upload.cgi
+++ b/scripts/upload.cgi/upload.cgi
@@ -174,6 +174,8 @@ def main():
         print >> sys.stderr, '[username=%s] mkdir %s' % (username, md5_dir)
 
     os.rename(tmpfile, dest_file)
+    os.chmod(dest_file, 0644)
+
     print >> sys.stderr, '[username=%s] Stored %s (%d bytes)' % (username, dest_file, filesize)
     print 'File %s size %d MD5 %s stored OK' % (filename, filesize, md5sum)
     send_email(name, md5sum, filename, username)