Files permissions: owner, group, public

  • lzr0

    (@lzr0)


    2 years, 9 months ago

    Could you please explain me what “group” and what “public” the file attribute menu refers to?
    For example, I want to harden .htaccess file (my site was hacked a few times and a malicious code was written in htacess). What setting should I use (I am the only owner, but Wordfence is writing to this file, and I think wordpress (the server) sometimes writes there too.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Moderator t-p

    (@t-p)

    2 years, 9 months ago

    What setting should I use (I am the only owner, but Wordfence is writing to this file…

    I recommend asking at https://wordpress.org/support/plugin/wordfence/ so the plugin’s developers and support community can help you with this.

    barnez

    (@pidengmor)

    2 years, 9 months ago

    The .htaccess is protected by the server configuration, as per any filename starting with .. If you were hacked and code added to that file, then you should review your broader security approach. Have a read of and action the suggestions in this resource to prevent future hacks: https://wordpress.org/support/article/hardening-wordpress/

    Thread Starter lzr0

    (@lzr0)

    2 years, 9 months ago

    The .htaccess is protected by the server configuration, as per any filename starting with .

    OK, thank you. What’s about all other files? What should be set for public_html folder?
    I don’t understand who is called group and who is public.
    My current setting is 750, and there is checkmark at execute for Group permission.

    barnez

    (@pidengmor)

    2 years, 9 months ago

    Generally, all folders (e.g. /wp-content/, /plugins/) should be set to 755, and all files (e.g. wp-cron.php, .htaccess) should be set to 644.

    Thread Starter lzr0

    (@lzr0)

    2 years, 9 months ago

    Generally, all folders (e.g. /wp-content/, /plugins/) should be set to 755, and all files (e.g. wp-cron.php, .htaccess) should be set to 644.

    Thank you, barnez. Do you see a problem if I completely deny to anyone (including owner) Write and Execute for .htaccess ? If I should need to change anything I guess I could FTP a new file.

    • This reply was modified 2 years, 9 months ago by lzr0.
    Moderator t-p

    (@t-p)

    2 years, 9 months ago

    You may read more about file permission at https://wordpress.org/support/article/changing-file-permissions/”

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Files permissions: owner, group, public’ is closed to new replies.