BUG – Plugin asking for WRITE access to various files?

  • TimJWatts

    (@timjwatts)


    12 years, 3 months ago

    Hi,

    I run a hardened WP server – that means that the web server use only has write access to ./wp-content/uploads/ and that directory is blacklisted from allowing code execution (PHP or CGI).

    I noticed in the last week that my personal blog was suddenly failing in the New Post screen, demanding FTP/FTPS credentials.

    After some hours of trying stuff, I isolated it to the All In One Event Calendar plugin and it wanted WRITE access to:

    wp-admin/post.php and most/all of wp-content/ (my patience ran out so I did not isolate which bits of wp-content/ it really wanted).

    Any ideas off the top of your head why it should be doing this?

    Unfortunately I have has to blacklist this plugin at King’s College for now as it now breaches my security rules – but I’d love to have it back.

    Kind regards,

    Tim Watts

    https://wordpress.org/plugins/all-in-one-event-calendar/

Viewing 2 replies - 1 through 2 (of 2 total)
  • cefiar

    (@cefiar)

    12 years, 3 months ago

    …../all-in-one-event-calendar/cache/ needs to be writable by the webserver user. The directory will end up containing .php files (the twig template engine writes out .php, which is the eventual code that the calendar runs).

    You can disable the cache, but it really slows down the plugin, and I don’t know if it will solve all the write access issues you’ve had.

    I don’t see why it would want write access to wp-admin/post.php though.

    PS: I don’t work for Time.ly.

    Thread Starter TimJWatts

    (@timjwatts)

    12 years, 3 months ago

    Thanks for the reply 🙂

    Let me try something…

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘BUG – Plugin asking for WRITE access to various files?’ is closed to new replies.