is it safe to have wp-content folder 777 in dedi server - GoFuckYourself.com

roly · 06-17-2011, 03:53 AM

hi

with all the constant wordpress updates i was going to user the auto-update feature to save time updating lots of blogs.

however this requires the wp-content folder to be 777, is it safe to leave this folder 777 on a dedicated server (prefered option) only used by me or should i change it back to 755 after updating?

any advice appreciated

greg80 · 06-17-2011, 04:00 AM

well I have it usually, uploads folder also and never been hacked or anything

roly · 06-17-2011, 06:21 AM

that's good to hear, thanks.

iwantchixx · 06-17-2011, 07:33 AM

Still shouldn't leave it 777. It's always good to have to manually update anyways because some changes can be incompatible with certain plugins and themes. Always good to be aware ahead of time incase you have any custom HTML in templates.

Stephen · 06-17-2011, 09:27 AM

Quote:

Originally Posted by iwantchixx

It's always good to have to manually update anyways because some changes can be incompatible with certain plugins and themes.

I'll add "poorly coded" to the above, as in "some changes can be incompatible with certain poorly coded plugins and themes."

If a WP core update breaks a plugin or theme, it's because the plugin or theme developer did not follow WP's guidelines and best practices. Replace those bad plugins and themes with one's written by professionals that understand WP -- or at least bother to read all the "how to write a plugin that won't break" resources that the Codex offers...

I also think that 777 is a bad idea, though handy at times

V_RocKs · 06-17-2011, 11:00 AM

If you have 1 directory set to 777 then it doesn't matter if you have another...

Nasty · 06-17-2011, 12:56 PM

You don't need the wp-content 777 for auto updates, just the /updates folder, I would never chmod the wp-content 777, if your server is using pure ftpd, there is a bug in wordpress that causes updates to fail, installing the plugin "FTP Upgrade Fix" will solve that problem

CI-Andrew · 06-18-2011, 08:18 AM

I'd agree it's best not to, although if you have a server with suphp installed then you couldn't even set it to 777 in the first place which is more secure.

iwantchixx · 06-18-2011, 09:39 AM

Quote:

Originally Posted by Stephen

I'll add "poorly coded" to the above, as in "some changes can be incompatible with certain poorly coded plugins and themes."

If a WP core update breaks a plugin or theme, it's because the plugin or theme developer did not follow WP's guidelines and best practices. Replace those bad plugins and themes with one's written by professionals that understand WP -- or at least bother to read all the "how to write a plugin that won't break" resources that the Codex offers...

I also think that 777 is a bad idea, though handy at times

I never said they were all coded perfectly. This conversation isn't about efficiency of coding. it's about security and updating. Some people use plugins that do break occasionally. it's just part of business.

Barry-xlovecam · 06-18-2011, 09:50 AM

Is 777 safe?
777 means world writeable ? anyone can write or change files.

06-17-2011, 03:53 AM	#1
roly Confirmed User Join Date: Aug 2002 Posts: 1,844	is it safe to have wp-content folder 777 in dedi server hi with all the constant wordpress updates i was going to user the auto-update feature to save time updating lots of blogs. however this requires the wp-content folder to be 777, is it safe to leave this folder 777 on a dedicated server (prefered option) only used by me or should i change it back to 755 after updating? any advice appreciated

06-17-2011, 04:00 AM	#2
greg80 Confirmed User Industry Role: Join Date: May 2007 Posts: 1,644	well I have it usually, uploads folder also and never been hacked or anything __________________ Say no to GoDaddy and high renewal prices! Go with NameSilo - FREE private whois for life, $8.99 regstrations and renewals. Free redirects, emails, great control panel and more! NameSilo rocks!

06-17-2011, 12:56 PM	#7
Nasty Confirmed User Industry Role: Join Date: Aug 2002 Location: Sunny Fucking California Posts: 1,575	You don't need the wp-content 777 for auto updates, just the /updates folder, I would never chmod the wp-content 777, if your server is using pure ftpd, there is a bug in wordpress that causes updates to fail, installing the plugin "FTP Upgrade Fix" will solve that problem __________________ “Ours is a world of nuclear giants and ethical infants. We know more about war than we know about peace, more about killing than we know about living. If we continue to develop our technology without wisdom or prudence, our servant may prove to be our executioner.” ― Omar Bradley (1948)

06-18-2011, 08:18 AM	#8
CI-Andrew Registered User Join Date: Jun 2009 Posts: 52	I'd agree it's best not to, although if you have a server with suphp installed then you couldn't even set it to 777 in the first place which is more secure. __________________ █ Accelerated Hosting - From Constant Internet █ Get your site on our super-fast global network - America / Europe / Asia █ Use coupon code GFY10 for 10% monthly discount for life

06-17-2011, 06:21 AM	#3
roly Confirmed User Join Date: Aug 2002 Posts: 1,844	that's good to hear, thanks.

06-17-2011, 07:33 AM	#4
iwantchixx Too lazy to set a custom title Industry Role: Join Date: Oct 2002 Location: The Boonies Posts: 12,860	Still shouldn't leave it 777. It's always good to have to manually update anyways because some changes can be incompatible with certain plugins and themes. Always good to be aware ahead of time incase you have any custom HTML in templates.

06-17-2011, 11:00 AM	#6
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,405	If you have 1 directory set to 777 then it doesn't matter if you have another...

06-18-2011, 09:50 AM	#10
Barry-xlovecam It's 42 Industry Role: Join Date: Jun 2010 Location: Global Posts: 18,083	Is 777 safe? 777 means world writeable ? anyone can write or change files.