I tried 755 and 775, but with bots settings I cannot have my PHP script open a file for writing. Only 777 works. I would like to know how real the risk is that someone (who does not have my login and password) starts writing or delete files from my website, personally I wouldn't know how to do something like that....