How to to secure WordPress file and folder permissions

admin管理员组

文章数量:1306124

I've read articles about protecting wp-config.php using .htaccess as well as setting the correct file permissions but I want it all in one place. What should my .htaccess file look like and what folders is it safe to have 777 vs 755 permissions?

I've read articles about protecting wp-config.php using .htaccess as well as setting the correct file permissions but I want it all in one place. What should my .htaccess file look like and what folders is it safe to have 777 vs 755 permissions?

• permissions

Share Improve this question edited Dec 11, 2013 at 20:47 Krzysiek Dróżdż 25.5k99 gold badges5353 silver badges7474 bronze badges asked Aug 11, 2010 at 21:02 toosheltooshel 1,42744 gold badges1818 silver badges1919 bronze badges

Add a comment  | 

4 Answers 4

Sorted by: Reset to default 9

Hardening WordPress on the WordPress Codex is a very good article on how to secure your WordPress blog, which goes into quite some detail on file permissions, as well as some other methods of securing WP.

Generally, it's never a good idea to have 777 set on anything. Read the links Thomas provided for more detail, but as a general rule 755 for folders and 644 for files is a good practice.

http://httpd.apache/docs/2.2/howto/htaccess.html

I am not an expert on this, but I hear that there is no need for .htaccess if you are using newer versions of Apache (IIS had this feature for quite some time.) You can disable directory browsing in your Apache config. It is the Indexes option in the Options directive of the Directory directive.

http://httpd.apache/docs/2.2/mod/core.html#options

I don't know if 777 is required by any. 755 is probably safe for content folders.

There are 3 type of users in apache, or almost any webserver users, groups, other

add user give him right permissions add him in webserver write permissioned group give him owner ship of web root ,

also see these to links

• You can check this out
• also this using wordpress

本文标签： How to to secure WordPress file and folder permissions