sites/default/files permission problem?

However if you don't have your own server and the skill to set php up more securely then 0777 is fine just be very sure to update drupal as security updates come out. The /default folder can be made non-writable even though it is the root of /files. so you can leave /default set to 0755 and /files /777 (publicly writable) which improves security. To change folder permissions use the chmod command in an ssh link(available with programs like secureCRT or openSSH) chmod 0755 default (when you are in sites) will do the job. There are often php ssh clients provided by hosts if you don't have an ssh set up or know how to set it up. I strongly recommend not logging onto ssh via a password(in fact make that not possible) and using encryption keys with the most aggressive setting (explicit tls/ssl). You might be surprised to know that Filezilla provides this very well now. There are still some bugs but they have vastly improved things. I was using the firefox fireftp but then I was at a hotel that had a not great wireless connection and couldn't maintain things with my servers so I tried filezilla and boy it worked great even with a poor connection and with the most aggressive connection available. DO not fool around with security it will cost you dearly if not in money -- time. Hackers can also just set and read your emails etc without telling you. But it's very easy to be secure you just need to learn things or hire someone that knows how to setup and maintain linux servers.

lastly any host that requires you to run in safe mode is not worth bothering with. There are so many hosts out there. Just set up how much you are willing to pay every month and hunt around. Make sure you back up your work and never sign a contract with a host. Make sure you do not pre pay for hosting. Always have it so you pay after the fact and drop them in a heartbeat if they let the network go or force you to tell them when you are having problems as in the server goes down or becomes inaccessible. They should be watching their network. Too many bums in hosting, give them like 3 strikes but only after they've earned 3 strikes. If they mess up like making you stay in safemode bail out and get a decent host. Also many give a free month or refund if you quit in 30 days. lastly if you host in China even if the data center is in the USA be very careful unless you really know the people. They can be sweet as pie sounding. We had problems with them spying on some clients email-- who happened to have factories in Hong Kong. It was a govt thing and I just don't think that sort of thing is right.