fmcneely

Guido,
I thought that too. Turns out it was controlled by my Theme (DIVI). Thanks for the assistance. I was able to get that resolved.
F. McNeely

Hello Wfasa,
Thank you for all that you do to help myself and others. I shut off the cron in wp-config.php file as well as the server-side cron to eliminate that as a possible cause of the problem, and to lend a hand in diagnosing the issue.

All it takes is someone visiting the home page and the permissions change as well as errors showing up in the error_log.

I will try to deleting the wflogs directory and see what happens but if it’s recreated the same as before, I expect that the results will also be the same.

The file permissions are changed whenever someone goes to the site. Here’s the process below. I first run a script that fixes the permissions and list the directory. Then I go to home page. Then I list the directory again. Permissions are changed simply by going to the page. The cron has been flagged before but that’s just because it loads a file every X minutes. I don’t think the cause is the cron itself. I’ve also disabled the cron to prove the point here.

[root /home/username/public_html]# fixperms username; dir /home/username/public_html/wp-content/wflogs/
Setting ownership for user username
Setting permissions for user username
total 188
drwxr-xr-x 2 username username  4096 Mar  3 18:03 .
drwxr-xr-x 7 username username  4096 Mar  3 13:29 ..
-rw-r--r-- 1 username username 40960 Feb 27 03:14 attack-data.php
-rw-r--r-- 1 username username     0 Feb 27 03:27 config.php
-rw-r--r-- 1 username username   133 Feb  7 14:20 .htaccess
-rw-r--r-- 1 username username  7051 Feb 27 03:14 ips.php
-rw-r--r-- 1 username username 87671 Feb 21 14:35 rules.php
-rw-r--r-- 1 username username 39141 Feb 21 14:35 wafRules.rules
[root /home/username/public_html]# dir /home/username/public_html/wp-content/wflogs/
total 188
drwxr-xr-x 2 username username  4096 Mar  3 18:03 .
drwxr-xr-x 7 username username  4096 Mar  3 13:29 ..
-rw-rw---- 1 username username 40960 Feb 27 03:14 attack-data.php
-rw-rw---- 1 username username     0 Feb 27 03:27 config.php
-rw-r--r-- 1 username username   133 Feb  7 14:20 .htaccess
-rw-rw---- 1 username username  7051 Feb 27 03:14 ips.php
-rw-rw-r-- 1 username username 87671 Feb 21 14:35 rules.php
-rw-r--r-- 1 username username 39141 Feb 21 14:35 wafRules.rules

DoH! Mika, thank you for doing my reading for me. Sorry for wasting your time.

I’m afraid I can’t find a valid option. I can’t verify that this issue will occur on WordPress.COM. I know that it can occur to many hosted wordpress sites.

The page you provided required that the issue be related to “sites hosted on WordPress.com and not the open source WordPress project”.

I should have specified that this is in regards to the open source project.