Forum vBulletin CHMOD settings: secure, functional and optimal as possible for files and folders?
 

I generally have all files on 644 and all folders on 755, and this works fine, but I'm not sure about how secure that is. I want to discuss the safest, most functional and most optimal CHMOD settings for files and folders. Most importantly perhaps, what should the includes folder be? A hacker recently kept replacing the config.php to to hijack the entire forum and redirect it to his ads, and he also got database access, corrupted the database and deleted one member from the database. The includes folder was on 755, and I'm thinking this wasn't secure enough. Should the config.php be set on 644, 444 or 440? I want to keep it as restricted as possible.