Forked from hawkapparel/set permission files wordpress
Last active
March 20, 2019 08:43
-
-
Save jadark/737fc5cf7d3f15ba501415f756804e34 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
EDIT 2019 | |
# Set uploads folder user and group to www-data | |
chown www-data:www-data -R wp-content/uploads/ | |
# Set uploads folder user and group to www-data | |
chown www-data:www-data -R wp-content/ | |
# Set uploads folder user and group to www-data | |
chown your-user:root-group -R wp-content/themes | |
# Set uploads folder user and group to www-data | |
chown your-user:root-group -R wp-content/plugins/your-plugin | |
# Set all directories permissions to 755 | |
find . -type d -exec chmod 755 {} \; | |
# Set all files permissions to 644 | |
find . -type f -exec chmod 644 {} \; | |
https://stackoverflow.com/questions/18352682/correct-file-permissions-for-wordpress | |
************************************************************* | |
When you setup WP you (the webserver) may need write access to the files. So the access rights may need to be loose. | |
chown www-data:www-data -R * # Let Apache be owner | |
find . -type d -exec chmod 755 {} \; # Change directory permissions rwxr-xr-x | |
find . -type f -exec chmod 644 {} \; # Change file permissions rw-r--r-- | |
After the setup you should tighten the access rights, according to Hardening WordPress all files except for wp-content should be writable by your user account only. wp-content must be writable by www-data too. | |
chown <username>:<username> -R * # Let your useraccount be owner | |
chown www-data:www-data wp-content # Let apache be owner of wp-content | |
Maybe you want to change the contents in wp-content later on. In this case you could | |
temporarily change to the user to www-data with su, | |
give wp-content group write access 775 and join the group www-data or | |
give your user the access rights to the folder using ACLs. | |
Whatever you do, make sure the files have rw permissions for www-data. | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment