I have a 7.3 board up and running for testing. There are no links to it on any web page yet someone was able to upload a bank phishing page to one of the board sub-directories. The installation specifies that some directories be writable to the world (777). Can I change these without compromising the function of the boards? How else can I protect myself?