Forum Replies Created

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter TheJesper

    (@thejesper)

    Quick response from my great hosting company… Ilait.com! Well, they told me that 777 will not give public write permissions to “the whole world” but only to the users on the server. Due to the “sandboxed” setup the users on the server getting this access is only the ftp-user (vweb) and the appache user (www-data) and, of course the root account.

    Setting the www-data as a member in the group vweb and setting chmod to 770 would apparently not be less of a security hazard since the root already has full access anyway…

    /Jesper Wilfing

    Thread Starter TheJesper

    (@thejesper)

    Thanks for clarifying! Unfortunately I’m not hosting the specific page myself (my own hosting environment uses IIS and here it is no problem for me to limit the permissions).

    I will have to get in contact with the host and see if there are any way I could lower the permission setting without conflicting with the upload functionality. Hopefully they have experience of wordpress-using-clients. Otherwise perhaps they could set the permission for the specific user on the folder or similar!?

    Otherwise I will have to leave the upload folder 777 and set the other folders to 750 when not updating themes or plugins.

    Thanks for your informative answer!
    /Jesper

Viewing 2 replies - 1 through 2 (of 2 total)