WordPress.org

1. nanofemto
   Member
   Posted 10 months ago #

   Thanks in advance, and I hope I've posted this in the correct forum. I'm running WordPress 3.1 (upgrading soon to 3.2) but I have an issue with access control for content on my site. Every page on my site, except one, is locked so that only subscribers have read access.

   However, I've noticed that some custom php code and documents loaded in the /wp-content directory, are accessible to anyone. How do I restrict the content in /wp-content so that the permissions are the same as the access controlled section of my site?

2. JamiGibbs
   Member
   Posted 10 months ago #

   Do you mean users can view theme files by going to 'Appearance > Editor' ?

3. nanofemto
   Member
   Posted 10 months ago #

   No, what I noticed is that if a subscriber copies a link to a document under ~/wp-content/uploads/.... and passes it on to a non-subscriber, it is visible to anyone.

Reply

You must log in to post.