Depending on the security configuration of your Web server the recommended default permissions of 755 for directories and 644 for files should be reasonably secure.