Permission controls for wp-content

  • Thanks in advance, and I hope I’ve posted this in the correct forum. I’m running WordPress 3.1 (upgrading soon to 3.2) but I have an issue with access control for content on my site. Every page on my site, except one, is locked so that only subscribers have read access.

    However, I’ve noticed that some custom php code and documents loaded in the /wp-content directory, are accessible to anyone. How do I restrict the content in /wp-content so that the permissions are the same as the access controlled section of my site?

Viewing 2 replies - 1 through 2 (of 2 total)

  • Do you mean users can view theme files by going to ‘Appearance > Editor’ ?

    Thread Starter nanofemto

    (@nanofemto)

    No, what I noticed is that if a subscriber copies a link to a document under ~/wp-content/uploads/…. and passes it on to a non-subscriber, it is visible to anyone.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Permission controls for wp-content’ is closed to new replies.