[TYPO3] hacking / file permissions

[Tracey Hummel]

I have a couple of typo3 sites on hostrockets.com that get hacked almost 
weekly.  I've implemented as many of the security suggestions as possible 
in Security Cookbook at: http://typo3.org/teams/security/

I tried setting all subdirectories to non-world writable even though this 
disables image and file uploads.

Is there a list somewhere showing the necessary permissions for each 
subdirectory and that shows which files need to be world writable?

Thank you,
Tracey