Forum Security Question
 

Hi, I got some question about vbulletins security

If I chmod the customavatars folder to 755 I am not able to upload any avatars, it only works after chmod it to 777. Why is that? and isn't that very risky?
The same problem I have with the customprofilepics folder...do I really need to set it on 777?