Installing plugins in a duplicate folder (from wordpress)

You don’t need WebDAV to host the site, but you may need it to manipulate files on the NAS. You should be able to use FTP instead, if it were working on port 21. If port 22 is working, you can use SFTP, which is better (more secure) anyway.

I’ve done that. I’ve removed WebDAv and stopped FTP to use SFTP instead with Filezilla on port 22, I’ve closed 21 entirely.

I suggest you remove all write permissions from the Anonymous user for better security.

I’ve done that.

If you can view you site via 192.168.1.234, you should double check you virtual host configurations for domain name access.

Please clarify what mean by this. The DDNS number has remained the same and is still listed in the router and listed in 1and1.

With regards to the ‘web’ permissions attributes I get can’t get it to drop lower than 777. If I do drop its attributes to 755 and do the same to projectionpictures I cant open wordpress dash in the folder again I get a 505 page warning.

Web/ (on 777)
http (singular) Read only
admin Read and Write
http (multiple) Read and Write
SYSTEM Read

Projectionpictures (on 777)
Owner: admin
admin Custom: Read and Write
http (multiple) Custom: Read and Write
Everyone Custom: Read and write

I’ve manage to loose administrators Custom: Read and Write

phpmyadmin default settings (on 755)
Owner: Root
admin Custom: Read & Write (No Del)
adminstrators Read
Everyone Read

Hasnt changed

WORDPRESS DEFAULT (on 755)
Owner: Single Http
http (single) Custom Read and Write
http (multiple) Read
Everyone Read

Hasn’t changed

In the Control Panel in User I only have admin and guest listed. Admin is active and guest is disabled. In Group panel I have http, administrators and users listed. administrators no longer has web permissions, http permissions has read/write for web and application permissions for FTP, File Station and FTP (there are others listed there but are not ticked). Users has no permissions for anything.

In Shared Folder for web. Under Permissions for Local Groups, administrators, users, and http are listed. There are columns for No access, Read and Write, Custom, and Read Only. There is only a tick for http under read & write.

For Local users only admin and guest are listed with columns for No access, Read and Write, Custom, and Read Only. Only admin with read and write is ticked.

In Internal System user there are many lines for applications with columns for No access, Read and Write, Custom, and Read Only listed. Nothing is ticked.

• This reply was modified 7 years, 2 months ago by pr0ject10n.
• This reply was modified 7 years, 2 months ago by pr0ject10n.

Ok I’m still not online with projectionpictures and wordpress but I have managed to downgrade the permission numbers for the folder to 775.

All folders 775
uploads (except) 777
wp-content 775
wp-includes 775 (not 644 I get 505 display)
All .php files 644
htaccess 660
wp-config.php (public_html folder) 660
index.php (public_html folder) 644

web/ is still 777 and if I try to downgrade it to 775 it refuses to in Fliezilla I get Error: set attrs for /web: permission denied

I’m not sure what else I can do to get my site live as it needs someone to look at my file station externally to solve it the folder and the permissions for each.. I’m much more confident now about restoring the permissions using filezilla (so I can access phpmyadmin and restore the WP Dash) and the various number combinations, but thats not a lot of use if I cant see the live site of the WP Dash.

Web/ (on 777)
administrators Read and Write
http (multiple) Read and Write
SYSTEM Read

Projectionpictures (on 775)
Owner: admin
admin Custom: Read and Write
http (multiple) Custom: Read and Write
Everyone Custom: Read (only)

phpmyadmin default settings (on 755)
Owner: Root
admin Custom: Read & Write (No Del)
administrators Custom Read & Write (No Del)
Everyone Read

WORDPRESS DEFAULT (on 755)
Owner: Single Http
http (single) Custom Read and Write
http (multiple) Read and Write
Everyone Read

I have a question for you is the structure of my folders /web supposed to be structured in any way like it is in the video. It suggests moving the htaccess and index.php (edits it slightly) out side the wordpress folder into the web/. Interestingly in his video dead.letter file is in the web/ folder and the guy says wordpress installs it, but doesn’t mention what its for, I only saw it next to photo.scr. Dead.letter is not in my web/ folder.

https://youtu.be/eIofxSb4Aa0

The notes about admin ownership are helpful. As I login in as admin. So there is no need to use administrators in the permissions. When you enter a permission the very to choice is Administration followed by two boxes ‘change permission’ and ‘take ownership’,in his video he ticks change permission only and doesn’t tick ‘take ownership’.

Would any part of that video be applicable to getting projectionpictures live?

The secret to solving this was an entirely new DDNS number. The one I had appeared to be blacklisted. I have to use Nord again in Romania.

So I’ve got the site SSL in place if you take a look at my site with http://www.whynopadlock.com, do I need to be worried about this as it got an X:

Invalid Intermediate You have an invalid or missing intermediate (bundle) certificate. This may not break your padlock on all browsers, but will on others. Please contact your SSL Vendor for assistance with this error.

The https is in place and I’ve selected HTTP/2 as well in the DSM > Security on the screen about using 5001 and 5002. In web station / virtual host for each of these: projectionpictures.com, http://www.projectionpictures.com, projectionpictures, projectionpictures.co.uk, http://www.projectionpictures.co.uk . I’ve ticked each box for HSTS and HTTPS.

With regards to: File station and filer ownership and permission. This is the current status. I would like to reduce web from 777 to 775 but I get blocked, how do you overcome that.

Web/ (on 777 it refuses do drop to 775) error message I get (set attrs for /web: permission denied)
admin (Custom) change permissions / Read & Write
SYSTEM Read
http (multiple) traverse / Execute files (only)
http (multiple) Read and Write

Projectionpictures (on 775) all files 664
Owner: http (multiple)
admin Custom: Full Control (Take Ownership and change permissions / Read and Write /Delete
http (multiple) Custom: Read and Write
http (multiple) Read only
users Custom: Read and Write

The 775 folder permissions in this folder are stopping my images appearing?

phpmyadmin default settings (on 775) all files 664
Owner: Root
admin Custom: Read & Write (No Del)
SYSTEM: Read
http (multiple): Read

WORDPRESS DEFAULT (on 775) No change all files 664
Owner: Single Http
http (single) Custom Read and Write
http (multiple) Read and Write
Everyone Read

Any permissions that be removed?

• This reply was modified 7 years, 2 months ago by pr0ject10n.

I do actually have three files for a certificate but I wasnt using the chain.pem file I was installing the privkey.pem and cert.pem, but for some reason not the chain one as the entry box is labeled intermediate and doesn’t sound like the proper thing. So that is sorted now but the certificates don’t last very long do they. I think the free one I can use from my registrar 1and1 lasts a lot longer, I think a few years.

Whynopadlock.com now gives me all green ticks.

I have two certificates in place both from Let’s encrypt one called projectionpictures.com which cover all the virtual host variants I have in web station and another projection.synology.me which is connected to FTPS and System Default. Souldf I bother with the second projection.synology.me certificate at all and are any functions in the DSM apart from FTPS and System Default that should be covered by a certificate irrespective of who its issued to. I don’t need Directory Server in there?

The security adviser app in the DSM states the ‘LAN services are accessible from the internet’ as medium risk and ‘SSH has not been changed from its default value’ as a high risk. Should I do anything about them?

Under health check: A plugin has prevented updates by disabling wp_version_check()

I’ll try to adjust the web/ 777 this afternoon. At the moment my uploaded images arent alway appearing and I’m getting the spinning sun symbol, I’m wondering if it any way connected to jetpack (without that you cant sync it up on the wordpress app on your phone or tablet.)

I managed to swap out certificates from lets encrypt to 1and1 which lasts a whole year instead. I managed to finally work on 1and1 site how to download private key as its hidden behind reissue certificate (thats useful), the other two files download from the label namesake. So I’ve got two certificates in the certificate panel.

I did a whynopadlock on the server IP address and it a gave me this result:

SSL Certificate Info
Certificate Issuer Let’s Encrypt
Certificate Type Let’s Encrypt Authority X3
Issued On 2019-02-26

Force HTTPS Your webserver is not forcing the use of SSL.
You may want to add a redirect to ensure a secure connection is used. More Info

Valid Certificate Your SSL Certificate is installed correctly.
Domain Matching Your SSL certificate matches your domain name!
Protected Domains: projection.synology.me

The solution for forcing the HTTPS for the server is to do this:

Add the following code to the .htaccess file in your webhosting account:

RewriteEngine On
RewriteCond %{HTTP_HOST} projection\.synology\.me [NC]
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://projection.synology.me/$1 [R,L]

Once this change is made your site will no longer be accessible on the insecure “http://projection.synology.me” URLs and all visitors will be redirected to “https://projection.synology.me” instead.

Would that be a new htaccess file that doesn’t exist yet being added into the web/ alongside index.html or to a pre-existing one in wordpress or projectionpictures?

Still stuck on certain images not appearing correctly for projectionpictures/run’n’gun page, although if I use ‘reader version’ in safari the images appear as they should do, so don’y understand the ‘brightness symbol’ flickering in their place.

• This reply was modified 7 years, 2 months ago by pr0ject10n.
• This reply was modified 7 years, 2 months ago by pr0ject10n.

When I view your run ‘n’ gun page the only image is the common header background. There are no img tags at all in post content.

Maybe when you looked at it I may have removed the three images. So what I’ll do is leave them on the page for 24 hours (or until you’ve replied to this). Maybe you can work out why there are not appearing properly (I’ve added one at the very bottom which I’ve used in the header). Why would the images in the common header appear, there are 5 of them which change randomly. While the ones on the run’n’gun refuse to appear?

As they appear in wordpress page. I can see this page via Nord VPN in Romania. With my tablet and can see the images there immediately. Why is there a difference?
http://192.168.1.234/wordpress/run-and-gun-video/

I will try to install your code into the htaccess file in projection pictures folder.

So here is the current one:

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress 

And I simply place you code above RewriteEngine On in the original?

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://projectionpictures.com/$1 [R,L]
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress 

• This reply was modified 7 years, 2 months ago by pr0ject10n.
• This reply was modified 7 years, 2 months ago by pr0ject10n.
• This reply was modified 7 years, 2 months ago by pr0ject10n.