Attachment directory permissions
 

Hello all and apologies if this has been answered before but a quick search didn't return any useful results.

I have set up VB to store attachments inside a subfolder, in the file system. Setting that folder and subfolders to 777 makes things work like a charm, but I don't feel comfortable knowing that there's a -rwx directory that users can easily upload things to. If I set it to 755, users can't upload anything.

What is the optimal setting for this to work without opening a security hole?

Thanks,

Alex