LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   permission settings for linux server using wordpress (https://www.linuxquestions.org/questions/linux-newbie-8/permission-settings-for-linux-server-using-wordpress-938127/)

paul1107 04-04-2012 03:09 PM

permission settings for linux server using wordpress
 
I am running a linux server running apache with centOS

I almost exclusively run wordpress sites on the box, but have been frustrated that any time I want to add say a plugin that requires an folder or a file to be created, the default permission settings dictates that I need to manually create a new folder rather than the wordpress automatically creating one instead.


I know its a security thing, but as I already have a security plugin installed, the risk I think is minimal?

Anyway can anyone advice how I can change the permissions accordingly (i.e. to create files and folders automatically when required)

Thanks!

jhwilliams 04-04-2012 03:45 PM

On my Wordpress installations, I arrange for the parent folders to be owned by the www-data group. This way, the web server can create and modify content when it needs to.

As you note, this is also a security hole. It is quite feasible to imagine a simple PHP script which could trash the entire directory by means of the www-data access.

So, be sure to take other precautions, and to limit the www-data ownership to the absolute minimum to accomplish the functionality you are requesting.


All times are GMT -5. The time now is 02:40 PM.