Disallow direct access to PHP files in wp-content/uploads/

  • Resolved byzgl

    (@byzgl)


    5 years, 6 months ago

    How to Disallow direct access to PHP files in wp-content/uploads/ ?
    Is there such a feature?

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    5 years, 6 months ago

    Hi,

    Go to WP Security -> Filesystem Security -> PHP File Editing and make sure you activated the following feature Disable Ability To Edit PHP Files:.

    Let me know if this helps you.

    Thank you

    Thread Starter byzgl

    (@byzgl)

    5 years, 6 months ago

    When I want to activate it I got this:

    Failed to make a backup of the wp-config.php file. This operation will not go ahead.

    Operation failed! Unable to modify or make a backup of wp-config.php file!

    wp-config.php is 777

    Thread Starter byzgl

    (@byzgl)

    5 years, 6 months ago

    I manually edited wp-config and added this at the bottom:

    
//Disable File Edits
define('DISALLOW_FILE_EDIT', true);

    Now it is working, thank you so much…:)

    Plugin Contributor mbrsolution

    (@mbrsolution)

    5 years, 6 months ago

    That is good to know 🙂

    Enjoy the plugin.

    Regards

    • This reply was modified 5 years, 6 months ago by mbrsolution.
    • This reply was modified 5 years, 6 months ago by mbrsolution.
    Plugin Contributor mbrsolution

    (@mbrsolution)

    5 years, 5 months ago

    Hi, just thought of sharing this information with you. I know you manually entered the above entry in wp-config.php file but that should have been done automatically by our plugin. That means there is a problem somewhere in your site.

    wp-config.php is 777

    Setting files and folders with 777 permission is very dangerous. Please read the following instructions.

    https://wordpress.org/support/article/changing-file-permissions/#the-dangers-of-777

    Thank you

    • This reply was modified 5 years, 5 months ago by mbrsolution.
    • This reply was modified 5 years, 5 months ago by mbrsolution.
Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Disallow direct access to PHP files in wp-content/uploads/’ is closed to new replies.