Support » Plugin: iThemes Security (formerly Better WP Security) » File Permission for .htaccess and Wp-Config

  • I noticed in version 3.6.6, the file permissions for both the .htaccess and wp-config files were set to 444 when you use server tweaks to lock down the files.

    However after the upgrade to version 4.0 and above, the file permissions seem to be set to the less restrictive 644 for both the above files. Was wondering what is the rational for this change and if the file permission is still set to 644 for version 4.0.21.

    Do advise and thanks

Viewing 6 replies - 1 through 6 (of 6 total)
  • I have a similar thing happening on all sites with iThemes Security installed. I reported it as a bug and posted about it on here a couple of days ago. I was hoping version 4.0.21 would have fixed this but it seems not. I can’t seem to change the permissions via ftp either. Whenever I do, they change back to 664 for .htaccess and 600 for wp-config.

    Noticed same behavior here; submitted bug report.

    Is this the same problem? This message appears when I try to save settings: WordPress was unable to save the your options to .htaccess or nginx.conf file.

    Which setting is jamming it up? Thanks.

    Mine says

    ‘WordPress was unable to save the your options to .htaccess or nginx.conf file. It looks like another process might already be working on the file. Please wait a few minutes and try again or contact support if the problem persists.’

    and it does persist.

    shortly after i was locked out of my dashboard/backend, i was told by support from my web host that it was a .htaccess issue and google chrome cache issue?

    Alas v4.1.3 does not appear to fix this issue. Although it is the first item on the change log list. I have not had any error messages like the ones listed here though.

    Update. v4.1.5 has fixed the permissions setting for my .htaccess file to 444 but alas wp-config is still at 600. getting there slowly 🙂

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘File Permission for .htaccess and Wp-Config’ is closed to new replies.