WordPress.org

Ready to get started?Download WordPress

Forums

Stop access to uploads directory (3 posts)

  1. Tom
    Member
    Posted 3 years ago #

    Perhaps I could have titled this topic differently but couldn't think what to call it, apologies.

    Here's an image I have just posted within a blog post on my site:
    wp-content/uploads/2011/06/thanks-for-the-pagerank-google.jpg

    I have just noticed that you can view the directory and it's contents. Eg.
    wp-content/uploads/2011/06/
    wp-content/uploads/2011/
    wp-content/uploads/

    wp-content/ is fine!

    If I remember rightly, you shouldn't be able to see these? Shouldn't there be a .htaccess or index.html file generated for each (automatically) to stop people being able to snoop in these directories?

    Tom

  2. kmessinger
    Volunteer Moderator
    Posted 3 years ago #

    All those directories should be 755.

    [Edit] http://codex.wordpress.org/Changing_File_Permissions

  3. Tom
    Member
    Posted 3 years ago #

    Thank you. I changed the permissions of the uploads folder and all sub-directories to 755, seems fine now. Now sure how they ended up set to 777- worrying!

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.