World – only has access to read files, 4. Group – has access to read (4) and write (2), 4 + 2 = 6. User – with the access to read (with the value of 4), write (having a value of 2) and execute (which has a value of 1), 4 + 2 + 1 = 7. You only need to remember the values given to the read, write and execute actions, though, because adding their corresponding numbers together will give you the correct file permission value.įor example, this is how you would calculate a file permission if you wanted the user to have complete access, while having stricter limitations for everyone else: The least amount of access you can give – besides none at all – is with a file’s permission set to 444 where everyone can only read the file. This being the case, the greatest amount of access you can grant is 777 where the user, group and world have access to read, write and execute files. To come up with these numbers, a value is given to each possible action combination: Third number – the amount of file access given to the world. Second number – the file access given to the group. First number – the access to file actions granted to the user. World – anyone with an internet connection who tries to view your filesįile permissions are primarily viewed as three consecutive numbers:. Group – other users that can also have access to the files you choose such as the members of your site. Execute – gives access to a file in order to run the programs or scripts that are contained in it. Read – allows access to a file to view its contents only. 
Generally speaking, there are two categories that need to be considered when viewing file permissions: Actions and user groups.Īctions your site’s plugins and files can make are:
So in today’s Weekend WordPress Project we’ll look at file and folder permissions in detail, and how to change them to improve your site’s security. The WordPress Codex has some information on WordPress file permissions, but it doesn’t go into a whole lot of detail so it can be tough to follow.
Setting your file permissions correctly may not save you from all attacks, but it will help make your site a bit more secure, making it a great addition to your current security measures. If your files don’t have the best possible permissions in place, it’s easier for hackers to intrude on your files and your site. This is important, as the Codex explains, because WordPress may need access to write to files in your wp-content directory to enable certain functions. File permissions specify who and what can read, write, modify, and access them.
0 kommentar(er)
