Cloud WP upgrade without s/ftp

  • Resolved Beeblebrox-BSD

    (@beeblebrox-bsd)


    4 years, 4 months ago

    Hello.
    When I try to install plugin or theme, I get an s/ftp credential request. To solve this should I:
    1. Slog through the setup for vsftpd for SFTP
    2. Set in wp-config.php [define (‘FS_Method’, ‘direct’);] AND change /var/www/wordpress/wp-content folder owner:group from root to www-data?

    * Already have done (2) and this works, but this could cause a security issue fro what I have read, hence my question.
    * If (1), is there a good tutorial, as on-line tutorials are incoherent on this.

    O/S: Debian-10
    HTTP Server: Lighhtpd
    WP Ver: 5.5.3

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    If you change the ownership of the wordpress tree on your server to the user under which PHP is running, then WP will be able to update itself without needing FTP.

    I would not use “www-data”, but create a new user for the specific website.

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Oh, just noticed you’re on localhost, so it really doesn’t matter. On an external facing site, you need to lock things down a bit. On localhost, where you’re on the only user, you can be a bit more relaxed about security issues.

    Thread Starter Beeblebrox-BSD

    (@beeblebrox-bsd)

    Hi Steven, thanks for the answer.

    just noticed you’re on localhost

    The instance is on public facing Cloud and I have full O/S root control – so I do need to lock down. Sorry if I placed the Q in the wrong forum.

    If you change the ownership of the wordpress tree on your server to the user under which PHP is running, then WP will be able to update itself without needing FTP.

    1. I only recursive-changed the wp-content folder ownership (all other folders still owned by root) and this partial change solved the problem for now.
    2. Re PHP: I think php-cgi runs as nobody:nogroup (which are the folder permissions that seem to work for PHP sessions folders). This did not work for me though.

    Active UNIX domain sockets (only servers)
/var/run/lighttpd/php.socket-0
    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    I run PHP-FPM. I’m not sure how this all works with lighthttpd.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Cloud WP upgrade without s/ftp’ is closed to new replies.