[Plugin: Ultimate Security Checker] WordPress folder permissions suggestion

  • Resolved Zemalf

    (@zemalf)


    15 years, 2 months ago

    First of all, thanks for the Ultimate Security Checker -plugin, it’s awesome! But I think this should be fixed…

    Files & folders permission check gives a warning:
    “Insufficient rights on wp-content folder!”

    I assume it checks that wp-content has permissions 777, as the ‘How to Fix’ section says:

    /wp-content/ should be writeable for all(777).

    This is not good for security. 755 is what it should be. If some plugin, or something else, (temporarily) needs 777 if can be changed when configuring the plugin and then back. This check should be removed from the Ultimate Security Check, or change it to 755.

    Also, (for the “How to Fix” part: for most blogs 644 does not work for /wp-admin/ and /wp-includes/ – Codex says (correctly) that by default all directories should be 755. (Hardening WordPress: File Permissions)

    http://ww.wp.xz.cn/extend/plugins/ultimate-security-checker/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author bsndev

    (@bsndev)

    15 years, 1 month ago

    Hi, thanks for this suggestions! and yes you’re right about the fodler rights, they should be 755 for sure to be able to open them(instead of 644) – my bad, changed already.

    Also thanks for suggestion about /wp-content/ – changed the text in FAQ section and check also.

    sfgthsfgjhfgj

    (@michaelsnyder)

    14 years, 10 months ago

    Along these lines, GoDaddy web hosting sets folder permissions at 705 and file permissions at 604. I think these are more restrictive that 755/644 but show up as insufficient rights.

    Rchia

    (@rchia)

    14 years, 7 months ago

    I noticed that I got the same insufficient permission errors from Ultimate Security Checker today, so I wonder if this has been updated in the plugin?

    To the developers of USC, good work and I appreciate your plugin!

    Thanks!

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘[Plugin: Ultimate Security Checker] WordPress folder permissions suggestion’ is closed to new replies.