• Resolved flyfisher842

    (@flyfisher842)


    This is really more of a Hostmonster webhosting issue I think. I set my php to fast cgi 5.4. Every few days, it gets set back to 5.2. The reason is Hostmonster daily backups require htaccess at 644 and not 404. Especially in the root. Apparently they can’t setup a script to set permissions from 404 to 644, due the backup and then set the permissions back the way they found them. I suspect that when the file is 404, they can’t read the fast cgi handler in the head of the htacess and this causes the setback to 5.2. This has happened about 5 times in the last month. Today wasted 4 hours of caching and optimizing plugin work.

    I know it is not as secure but is there any big deal in leaving the root htaccess at 644 so this stops happening. I keep all the sub account htaccess at 404 unless I need to write to the file.

    https://ww.wp.xz.cn/plugins/bulletproof-security/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author AITpro

    (@aitpro)

    Locking the root htaccess file with 404 Read-Only file permissions is not really a security measure since overriding file permissions is child’s play for hackers and WAS instead more for preventing something else (another plugin, etc) from writing to it and wiping out/deleting the BPS security code in the root htaccess file. In the past there was a serious problem caused by plugins and themes that were using the WordPress flush_rewrite_rules() function incorrectly, but several versions of BPS ago we redesigned the root .htaccess file so that that problem is no longer a problem. In other words, it is not necessary to lock the root .htaccess file anymore.

    Thread Starter flyfisher842

    (@flyfisher842)

    I suspected that running it on 644 was not a major issue but wanted to check. Thanks for the help and I will close the thread.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘BPS and fast cgi 5.4’ is closed to new replies.