• Hello,

    I recently did a favour for a friend where I tidied up his WordPress website. When I first connected via FTP, none of the WordPress files (and selected other files such as the .htacess) were visible to me.

    When he spoke to his original web designer, it turns out he made these files only visible to certain IP addresses, and invisible to all others (to limit hacking risk).

    Could anyone tell me;
    ? Is this something worth doing/how much does it add to security?
    ? How this is done? Is this an plugin or a control panel setting?

    Many thanks for any help.

Viewing 1 replies (of 1 total)
  • This is a control panel setting on the host.

    It would help with FTP security, not WordPress security. FTP is inherently insecure because the login details are passed in plain text. Limiting FTP access to just some IP addresses is a band aid, but will increase FTP security. Ideally, the host will offer SCP or SFTP which are more secure replacements for FTP.

Viewing 1 replies (of 1 total)
  • The topic ‘Limiting FTP Access’ is closed to new replies.