I have been having troubles with the attackers attacking to my Joomla sites. They create some php files which are encoded with base64 algorithm in the directories of which chmod values are 774 or higher.
In order to upload pictures via administrator panel's media manager, I have to set images directory's chmod value to 774. So the attacker appends some malicious php files into this directory.
I have an idea that could help but do not know how to do it. Is it possible to set chmod to 774 right after logging into Joomla administrator panel and set back to 755 after logging out.
This is not a sharp solution but it reduces the probability of getting damage from attacks.