Permission files with PHP-FM

  • Hello.

    I have some doubts on setting file permissions of WordPress with PHP-FM.
    I must make some web WordPress sites on different servers with different configurations: Single installation ( one user on one server) and Shared installation ( more users on same server).

    I use debian and have read that mod_php is not supported on debian, then i choosed “PHP-FM” how handler php. So I think I will have same configuration for two different configurations:

    a) i will use PHP-FM with Apache to create virtual host to manage the different web sites, for security reasons i will configure PHP Pools, then i will define “sitex” as Apache system users

    b) then the web root will be owned by “user account” and readable by sitex user with these permissions: 750

    c) then i will configure wp-content how owned by sitex and readable by user account with these permissions: 770

    This configuration is correct?

    Many thanks.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator t-p

    (@t-p)

    All directories should be 755
    All files should be 644

    Thread Starter anto60

    (@anto60)

    Excuse me but this recommendation do not seem to me exact. If you consult the “Hardening WordPress” guide you can see this : “/wp-content/:
    User-supplied content: intended to be writable by your user account and the web server process. ”
    Then “wp-content” must be 770 and owned by user account and writable by Apache system user (this is valid for “wp-content” because there are some limitations for /themes and /plugins).

    And then, if i have a shared installation, i can not create my web root with 775 permission because other users can see my files.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Permission files with PHP-FM’ is closed to new replies.