jwesseldyke
Member
Posted 4 years ago #
I'm reading with interest -- and horror! -- all the security issues everyone is having... So, I'm just curious about something...
I have three separate 2.5 installs on different domains... Assuming I'm done editing theme files, and 1 of the 3 sites are set up to allow the uploading of images by it's two authors for use in posts...
What should files/folders be chmod'd to so they're less vulnerable, but still allow WP to function appropriately?
J
This is what is recommended in the codex.
http://codex.wordpress.org/Changing_File_Permissions
You should also read over the hardening wordpress codex page for other security guidelines.
http://codex.wordpress.org/Hardening_WordPress
I have three separate 2.5 installs on different domains
At the moment, there are no known security issues with WordPress 2.5.
Some of the issues reported have shown indications that the users in question were hacked prior to upgrading, and the hackers left themselves an entry point in the form of an extra user on the blog. This is why it's vitally important to keep regular backups, so that a successful intrusion cannot leave behind traces like this, after you restore and harden the system.
jwesseldyke
Member
Posted 4 years ago #
Thank you both, you have been most helpful