Hacked!
 

My site was recently hacked. I probably left something on 777 that should not have been.

Does anyone know of a list of files and folders and what setting each should be.

On a related note, is there some way of testing to see how secure my site is?

Any help is greatly appreciated.

Thanks,

Files 644
Folders 755

If you have attachments/avatars/profile pics being stored in folders, then they would need 777, the forum admincp will tell you that those folders require 777.

Some hacks/add-ons also require 777 and should be noted in the install script by the author.