Correct attributes (chmod) for my directories?

[Cybershaolin]

In my forum, I use the folder option instead of the database one to store the files. The only way for me to make this work is to use 777 for my sub-folder. If I use 755, when trying to post a file on the forum, it says that it cannot write...

My sub-folder is located this way: /forum/files.

This is not safe no?

Is there a guide which explains in details all chmod attributes that should be applied to our vbulletin software?

I made a search and found different theories but nothing official. I think there should be a sticky post on this or even a note in the installation or upgrade process of the soft.

Users: Don't you think it would be a great idea? This is a big security matter!

[Steve Machol]

If you want to store attachments in the file system, then the directory must be world-readable and writable (777).

It would be safer if you placed that directory above your main web directory so it's not accessible via the web.

Note, this is covered in the documentation here:

Moving Attachments to the Filesystem