> They'll still be able to inject additional options
> (-O <path> for example), so this won't be safe
> anyway.
> 
> The best way in my opinion would be to create a
> dedicated user (such as "httrack" or "mirror") ; for
> example by using adduer/useradd, or by editing
> /etc/passwd, and only allow one specific directory
> to be writable by this user.
> 

Thank about your quick answer.

Indeed, I forgot the option -O ;-)

I already tested to  create an user with a right homedirectory and the default
base path is then its home directory in the step2 menu, but :
- The user isn't fully chrooted in its homedirectory (the base path contains
the full path of its home directory)
- The user can change it (parent folder) and the copy is then saved in the new
folder.
- After another new sequence, the menu step2 contains the base path modified
by the user. For the last point, I understood  how restore the base path ( I
just found the file .httrack.ini)