WP-Config access rights

  • Resolved LSBK

    (@lsbk)


    4 years, 8 months ago

    Hi
    my WP-Config.php is located above the root folder with Access rights 400.
    I get:

    Check if wp-config.php file has the right permissions (chmod) set.
    Current wp-config.php chmod (0400) is not ideal and other users on the server can access the file.

    Under details, I’m proposed to use chmod 400 or 440…

    WP is 5.3.2 Plugin is 5.9.2

    The page I need help with: [log in to see the link]

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author Lars Koudal

    (@lkoudal)

    Hi lsbk

    Thank you for letting me know about this bug ??

    I have started work on a fix that will be out in the next release, expected later today or tomorrow.

    Plugin Author Lars Koudal

    (@lkoudal)

    Hi lsbk

    Version 5.94 was just released, please update and try again, the test should now properly understand difference between “0400” and “400” ??

    Thread Starter LSBK

    (@lsbk)

    sorry…
    it’s 400 in my explorer, but the plugin shows now 755…

    Plugin Author Lars Koudal

    (@lkoudal)

    Hi lsbk

    Sorry to hear that – Hmm.. Could I ask you to check if you still have a wp-config.php file in the root folder? The plugin checks there first, so if the file still exists, it will return the chmod rights for that file?

    Thread Starter LSBK

    (@lsbk)

    Hi
    I got Current wp-config.php chmod (755) is not ideal and other users on the server can access the file. Tested file: /home/lesbisch/www/lsbk.ch/..
    My wp-config.php lays in /home/lesbisch/www/
    there is no wp-config in the root and below (checked with the hoster’s explorer and via SFTP)
    But interestingly in the backup (made by BackWPup) I see a WP-Config.php with the backup’s date. Does WP create a virtual copy of wp-config?

    I didn’t want to make a new post seeing this post.
    I am having this exact same issue.

    The permissions gives me options to change for user group and world. 0400 would be 400 however the scans dont pick up the change.

    Plugin Author Lars Koudal

    (@lkoudal)

    Hello @threwthenevr thank you for pointing out this error.

    This will be fixed in the next release. We are finishing a couple of other things and once tested a bit more it should be released soon.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘WP-Config access rights’ is closed to new replies.