• Resolved progresst

    (@progresst)


    It appears the the wp-content/uploads requires 777 (rwx for everyone) in order to upload media files such as images etc. from the WP admin system? Can someone shoot me a brief primer on how this is a safe practice to have these permissions opened up to the world like this? Is there an alternative?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Samuel Wood (Otto)

    (@otto42)

    www.remarpro.com Admin

    It doesn’t necessarily require 777, but yes, it does require write permissions for whatever user the webserver is running under.

    No, there is no alternative. If the webserver is receiving a file, then the webserver needs enough permission to write the file somewhere. This isn’t WP specific, it’s just the way of the world with file uploading.

    There is one alternative: you could install suPHP, so that PHP scripts run with the permissions of the account owner, rather than ‘nobody’. That allows PHP to write to any directory in your account without having to change the permissions.

    However, a lot of people think that is more dangerous than opening up a single directory with 777 permissions. I do not use suPHP myself.

    Thread Starter progresst

    (@progresst)

    Cool, thanks for the response…does seem like a catch-22. Ideally having no uploads would be ideal ??

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘WP wp-content permission on Linux / *nix systems’ is closed to new replies.