Or have the same user that runs php access to write to your webroot. This incurs other vulnerabilities though.