Ownership of files and folders and permissions
-
Hello,
I set the ownership of all wordpress files as recommended in the article Hardening WordPress: “All files should be owned by your user account, and should be writable by you. Any file that needs write access from WordPress should be writable by the web server, if your hosting set up requires it, that may mean those files need to be group-owned by the user account used by the web server process”.
However it seems to be that your plugin assumes that the user account used by the web server process (in my case on Debian that’s www-data) ownes all the files…
Your plugin wants to set file permissions but that would only work if www-data would be the owner. OK, so I can set the permissions via ssh. But then your plugin wants to set file permissions for the .htaccess file to 644. That means that your plugin can’t write to this file anymore. Sure I can set file permissions to 644 for .htaccess – but then a lot of options of your plugin don’t work anymore (because it can’t write to .htaccess).
Why would you assume that people don’t set file ownership as recommended by WordPress? Do you disagree with them? Would you recommend to let the user account used by the web server process own all the files and directories?
Thanks,
Stefan.
- The topic ‘Ownership of files and folders and permissions’ is closed to new replies.