Best thing would be to have the board running cgiwrap'd under a dedicated id, then chown all the UBB stuff over to it and start chmod'ing as low as you want. You could even go 700. But that requires a working cgiwrap.
Otherwise, "nobody" MUST have access to the files, and 777 is typically the only way to get that..
Almost forgot to mention:
If the board doesn't run under a dedicated user, there's nothing to stop another server user from accessing the member files using their own CGI scripts, which also run as "obody"
Graeme
