Write permissions are not necessary for posting replys. They get saved in database, not as text files in most of the forum software. You may need to give permissions for file uploads, if you support them and are saved as files. For that too you need to give permission for only the directory used, not wwwroot as a whole.
To protect from hacking, I guess you need to know more. If it was done using any known flows, you will have to upgrade to the latest version or apply fixes. I guess you are in danger of more attempts and need to talk to a PHP expert in detail.
|