babel2009
Member
Posted 3 years ago #
HI, quick question about security. I just installed wp-db-backup and had to CHMOD my backup directory to 777. I have wp-db-backup scheduled to send me my DB once a week.
Is it safe to leave my CHMODed backup directory at 777? (I figured it was becaase it has a randomly generated name, but just in case, I'm asking)
BTW, I use WP 2.7 and the latest version of wp-db-backup.
honestly? no, its not (its not safe to have any directory world-readable and world-writable). which is why it has a randomly generated name. that's done to mitigate the obvious risk.
babel2009
Member
Posted 2 years ago #
Thanks ... I'll probably go back to the old CHMOD configs and manually backup every week. Too sketchy.
mdunmore
Member
Posted 2 years ago #
that plugin also resets EVERY directory and file in your wp install root directory to have permissions of 777 when it runs the cron! CRAZY!