Well, my site was just hacked for the second time this week. I hate people with too much time on their hands. It looks like they inserted a mail SPAM program in the albums folder. My question to you is what is the most restrictive, allowable permissions for these folder can the be set to?
It must be writable for whatever user your webserver runs as, which depends on your own particular server setup.
Ok, I understand. Now let's just hope I get my site back.