{"id":336614,"date":"2026-07-15T15:13:48","date_gmt":"2026-07-15T15:13:48","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/sitecare-file-permissions\/"},"modified":"2026-07-15T15:48:01","modified_gmt":"2026-07-15T15:48:01","slug":"sitecare-file-permissions","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/sitecare-file-permissions\/","author":11631598,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"2.2.0","stable_tag":"2.2.0","tested":"7.0.1","requires":"6.1","requires_php":"7.2","requires_plugins":null,"header_name":"SiteCare \u2013 File Permissions Manager","header_author":"SiteCare","header_description":"Safely and recursively fix file & folder permissions (chmod) across your whole WordPress site, with sensible presets and a live file tree.","assets_banners_color":"35539a","last_updated":"2026-07-15 15:48:01","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/buymeacoffee.com\/mchncd","header_plugin_uri":"","header_author_uri":"https:\/\/sitecare.cz","rating":0,"author_block_rating":0,"active_installs":0,"downloads":38,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"2.1.0":{"tag":"2.1.0","author":"fstab","date":"2026-07-15 15:31:56"},"2.2.0":{"tag":"2.2.0","author":"fstab","date":"2026-07-15 15:48:01"}},"upgrade_notice":{"2.2.0":"<p>New name (SiteCare \u2013 File Permissions Manager). How the plugin works is unchanged.<\/p>","2.1.0":"<p>Adds a confirmation step before changes, native admin colours and keyboard accessibility. Recommended for all users.<\/p>","2.0.0":"<p>Redesigned, safer and translation-ready. Recommended for all users.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3609086,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3609086,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256},"icon.svg":{"filename":"icon.svg","revision":3609086,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3609086,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3609086,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["2.1.0","2.2.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3609086,"resolution":"1","location":"assets","locale":"","width":1300,"height":1107},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3609086,"resolution":"2","location":"assets","locale":"","width":1300,"height":1107}},"screenshots":{"1":"The two-column interface: settings and advanced per-file overrides on the left, live permission tree on the right.","2":"Advanced options for sensitive files with recommended, global or custom modes."}},"plugin_section":[],"plugin_tags":[9746,239739,1329,895,600],"plugin_category":[54],"plugin_contributors":[231549],"plugin_business_model":[],"class_list":["post-336614","plugin","type-plugin","status-publish","hentry","plugin_tags-chmod","plugin_tags-file-permissions","plugin_tags-htaccess","plugin_tags-permissions","plugin_tags-security","plugin_category-security-and-spam-protection","plugin_contributors-fstab","plugin_committers-fstab"],"banners":{"banner":"https:\/\/ps.w.org\/sitecare-file-permissions\/assets\/banner-772x250.png?rev=3609086","banner_2x":"https:\/\/ps.w.org\/sitecare-file-permissions\/assets\/banner-1544x500.png?rev=3609086","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/sitecare-file-permissions\/assets\/icon.svg?rev=3609086","icon":"https:\/\/ps.w.org\/sitecare-file-permissions\/assets\/icon.svg?rev=3609086","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/sitecare-file-permissions\/assets\/screenshot-1.png?rev=3609086","caption":"The two-column interface: settings and advanced per-file overrides on the left, live permission tree on the right."},{"src":"https:\/\/ps.w.org\/sitecare-file-permissions\/assets\/screenshot-2.png?rev=3609086","caption":"Advanced options for sensitive files with recommended, global or custom modes."}],"raw_content":"<!--section=description-->\n<p>File and directory permissions are one of the easiest things to get wrong on a WordPress site \u2014 and one of the most consequential. Set them too loose and you hand attackers an easy way in; set them too tight and updates, uploads, and plugins quietly stop working. The correct values are well known (755 for folders, 644 for files, locked-down config files), but applying them the usual way means FTP or SSH access, recursive <code>chmod<\/code> commands, and a real risk of breaking your site with a single typo.<\/p>\n\n<p>SiteCare File Permissions Manager removes all of that. From one screen under <strong>Tools \u2192 Permissions<\/strong>, it recursively applies the safe, recommended permissions across your entire WordPress install \u2014 no FTP, no shell, no command line. The recommended values are pre-filled, so for most people it really is a single button.<\/p>\n\n<p><strong>Features<\/strong><\/p>\n\n<ul>\n<li>One-click recursive chmod for the whole WordPress site.<\/li>\n<li>Separate, recommended values for directories (755) and files (644).<\/li>\n<li>Advanced overrides for sensitive files (.htaccess, wp-config.php, .user.ini, php.ini) with three modes: recommended read-only (444), the same value as your files, or a custom value per file.<\/li>\n<li>Live, expandable file tree that shows the current permission of every file and folder, with colour hints for safe vs. risky values.<\/li>\n<li>Real progress bar with batched processing, so it works on large sites without hitting PHP timeouts.<\/li>\n<li>Fully translation-ready and shipped with translations for major languages.<\/li>\n<li>No external scripts, fonts or trackers are loaded.<\/li>\n<\/ul>\n\n<p>A rule for a sensitive file (for example php.ini) is only applied when that file actually exists on the server. Missing files are simply skipped.<\/p>\n\n<!--section=installation-->\n<h4>From your WordPress dashboard (recommended)<\/h4>\n\n<ol>\n<li>Go to <strong>Plugins \u2192 Add New<\/strong> and search for \"SiteCare File Permissions Manager\".<\/li>\n<li>Click <strong>Install Now<\/strong>, then <strong>Activate<\/strong>.<\/li>\n<\/ol>\n\n<h4>Manual upload<\/h4>\n\n<ol>\n<li>Download the plugin .zip file.<\/li>\n<li>Go to <strong>Plugins \u2192 Add New \u2192 Upload Plugin<\/strong> and choose the .zip.<\/li>\n<li>Click <strong>Install Now<\/strong>, then <strong>Activate<\/strong>.<\/li>\n<\/ol>\n\n<h4>Getting started<\/h4>\n\n<p>Go to <strong>Tools \u2192 Permissions<\/strong> and click <strong>Start changing permissions<\/strong>. The recommended, safe values are already filled in, so you can review the live file tree and apply them in one click.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"what%20permissions%20should%20i%20use%3F\"><h3>What permissions should I use?<\/h3><\/dt>\n<dd><p>The defaults are the widely recommended values: 755 for folders and 644 for files, and read-only 444 for sensitive configuration files. Only change them if you know what you are doing.<\/p><\/dd>\n<dt id=\"what%20if%20php.ini%20or%20.user.ini%20do%20not%20exist%20on%20my%20server%3F\"><h3>What if php.ini or .user.ini do not exist on my server?<\/h3><\/dt>\n<dd><p>Nothing happens for them. The plugin only changes files that actually exist, and missing files are skipped safely.<\/p><\/dd>\n<dt id=\"is%20it%20safe%20to%20run%20on%20a%20large%20site%3F\"><h3>Is it safe to run on a large site?<\/h3><\/dt>\n<dd><p>Yes. Processing is done in small batches with a live progress bar, so it does not hit PHP execution time limits.<\/p><\/dd>\n<dt id=\"who%20can%20use%20it%3F\"><h3>Who can use it?<\/h3><\/dt>\n<dd><p>Only administrators (users with the manage_options capability) can open the screen or run any action.<\/p><\/dd>\n<dt id=\"does%20it%20load%20anything%20from%20third-party%20servers%3F\"><h3>Does it load anything from third-party servers?<\/h3><\/dt>\n<dd><p>No. All styles and scripts are bundled with the plugin. Nothing is loaded from external servers.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>2.2.0<\/h4>\n\n<ul>\n<li>Renamed to SiteCare \u2013 File Permissions Manager, part of the SiteCare plugin family<\/li>\n<\/ul>\n\n<h4>2.1.0<\/h4>\n\n<ul>\n<li>New: confirmation step before changing permissions, showing exactly how many files and folders will be affected.<\/li>\n<li>New: interface now follows your chosen WordPress admin colour scheme.<\/li>\n<li>New: file tree is fully keyboard accessible.<\/li>\n<li>Improved: errors are shown inline instead of browser pop-ups.<\/li>\n<li>Improved: refreshed icons and a friendly way to support the plugin (review, translate, donate).<\/li>\n<\/ul>\n\n<h4>2.0.0<\/h4>\n\n<ul>\n<li>New two-column interface with a live file tree and real progress bar.<\/li>\n<li>Advanced overrides for .htaccess, wp-config.php, .user.ini and php.ini (recommended \/ global \/ custom).<\/li>\n<li>Batched, timeout-safe processing.<\/li>\n<li>Full internationalization with translations for major languages; no external resources loaded.<\/li>\n<li>Security hardening: nonces, capability checks, path-traversal protection, symlink skipping.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"Fix insecure or broken file permissions across your whole WordPress site safely from one screen \u2014 no FTP, SSH, or command line.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/336614","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=336614"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/fstab"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=336614"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=336614"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=336614"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=336614"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=336614"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=336614"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}