Title: Permissions
Last modified: August 31, 2016

---

# Permissions

 *  [Famous](https://wordpress.org/support/users/famous/)
 * (@famous)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/permissions-66/)
 * Hello Guys,
 * So usually it seems platforms or CMS systems have guidelines on permissions. 
   For instance Magento has their permissions set to:
 * chown -R :apache .
    find . -type d -exec chmod 770 {} \; && find . -type f -exec
   chmod 660 {} \; && chmod u+x bin/magento
 * for the root of the installation, however I have no guidelines on how to set 
   my permissions. Anyone have a guideline?
 * Thank you

Viewing 6 replies - 1 through 6 (of 6 total)

 *  Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/)
 * (@sterndata)
 * Volunteer Forum Moderator
 * [10 years, 4 months ago](https://wordpress.org/support/topic/permissions-66/#post-7278820)
 * directories 775 or 770, files 664 or 660.
 * [https://codex.wordpress.org/Changing_File_Permissions](https://codex.wordpress.org/Changing_File_Permissions)
 * [http://codex.wordpress.org/Hardening_WordPress](http://codex.wordpress.org/Hardening_WordPress)
 *  Thread Starter [Famous](https://wordpress.org/support/users/famous/)
 * (@famous)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/permissions-66/#post-7278828)
 * Who owns the files and directories?
 * myuser:apache
    Or apache:myuser Or myuser:myuser
 *  Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/)
 * (@sterndata)
 * Volunteer Forum Moderator
 * [10 years, 4 months ago](https://wordpress.org/support/topic/permissions-66/#post-7278832)
 * apache:myuser
 * but that’s not horribly secure.
 * If you’re up for it, see [https://wp-root.org/server/install-php-fpm-tcp-unix-sockets-centos/](https://wp-root.org/server/install-php-fpm-tcp-unix-sockets-centos/)
 *  Thread Starter [Famous](https://wordpress.org/support/users/famous/)
 * (@famous)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/permissions-66/#post-7278836)
 * So that’s the concern — is what are most people doing :/
    If that’s not secure,
   then why doesn’t WordPress provide specifics like Magento so that we can lock
   the site down a bit better? I understand that a majority of installs are done
   through cPanels & goDaddy type installs, but what about dedicated servers & cloud
   environments. It would be nice to get specifics on those.
 * Not sure on phpFPM :/ kinda too much, but thats the only solution then I guess
 *  Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/)
 * (@sterndata)
 * Volunteer Forum Moderator
 * [10 years, 4 months ago](https://wordpress.org/support/topic/permissions-66/#post-7278845)
 * The idea is that you run each website on your server as a different user so if
   I hack site1 in /var/www/site1 and gain control of the PHP process, I have no
   permissions for /var/www/site2, etc. It limits the damage.
 * WordPress is open source software. It’s up to you to understand how to sysamdin
   if you choose to run your own server. Those who don’t or don’t want to are better
   off with shared hosting or a managed WP provider.
 *  Thread Starter [Famous](https://wordpress.org/support/users/famous/)
 * (@famous)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/permissions-66/#post-7278864)
 * Ok so it looks like:
 * apache:myuser
    and directories 775 or 770, files 664 or 660
 * is the solution.
 * Thanks

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Permissions’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 6 replies
 * 2 participants
 * Last reply from: [Famous](https://wordpress.org/support/users/famous/)
 * Last activity: [10 years, 4 months ago](https://wordpress.org/support/topic/permissions-66/#post-7278864)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics