I am running a linux server running apache with centOS

I almost exclusively run wordpress sites on the box, but have been frustrated that any time I want to add say a plugin that requires an folder or a file to be created, the default permission settings dictates that I need to manually create a new folder rather than the wordpress automatically creating one instead.


I know its a security thing, but as I already have a security plugin installed, the risk I think is minimal?

Anyway can anyone advice how I can change the permissions accordingly (i.e. to create files and folders automatically when required)

Thanks!

On my Wordpress installations, I arrange for the parent folders to be owned by the www-data group. This way, the web server can create and modify content when it needs to.

As you note, this is also a security hole. It is quite feasible to imagine a simple PHP script which could trash the entire directory by means of the www-data access.

So, be sure to take other precautions, and to limit the www-data ownership to the absolute minimum to accomplish the functionality you are requesting.

1 members found this post helpful.