WordPress.org

Ready to get started?Download WordPress

Forums

Correct permissions? (5 posts)

  1. kjetilgf
    Member
    Posted 7 years ago #

    Hi
    Is there somewhere an overview of which permissions I should set on the different files and folders?
    I've been searching around a bit, there are several threads, but none really puts it down to something like
    - 777 for wordpress main folder - 644 for php files (just as an example)
    Also details on Group and Owner should be set to, would be very helpful.

    AND
    Is it important if my web host runs the server in SafeMod or not? (Mine does)
    Thanks,
    Kjetil Flekkoy

    PS - found this, but it doesn't make it clear to me:
    http://codex.wordpress.org/Changing_File_Permissions

  2. djaef
    Member
    Posted 6 years ago #

    Yes, I was looking for exactly the same thing. I had a few troubles during installation, and although I got it all running, I'm now concerned that I've left back doors open and the security of the site is not as good as it should be. What I want is a list of folder permissions, folder by folder, or file by file, whatever it takes, to systematically go through and check the proper permissions are in place.

  3. Chris_K
    Member
    Posted 6 years ago #

    Since there are so many different ways to configure web servers, there can never be an "absolute" guide to cover all scenarios. The link in the OP's post is a great place to start -- you just need to know what user is running apache...

    Another reference: Hardening_WordPress. See the File Permissions section.

    General rule of thumb is 755 for directories and 644 for files. But again, that depends on how your server is config'd.
    777 is never a good thing and should only be done temporarily...

  4. Ogre
    Member
    Posted 6 years ago #

    755 and 644 is best. 775 and 664 is often required on hosted services. 777 is to be avoided. If your host requires this setting, they are idiots.

  5. Anonymous
    Unregistered
    Posted 6 years ago #

    My blog(s) are hosted on Textdrive, on Pendrell. I have WordPress 2.5 on http://threeeighthsspacer.com/blog and it seems to be working fine, but I decided to go through and check up on the permissions set for the files and folders. I blogged my progress at
    http://threeeighthsspacer.com/blog/2008/07/31/setting-permissions-properly-in-wordpress/
    so that I would have a guide to go on, since I have several WP blogs. Also there appears to be a paucity of clear, concise instructions written for the average wannabe-geek like me. I followed (mostly) the recommendations given in the WordPress Codex, with some modifications that I think are favorable in regard to security. Perhaps someone here would be kind enough to look over my guide and let me know if and where I have gone awfully wrong . . .

Topic Closed

This topic has been closed to new replies.

About this Topic