File permission hardening in Wordpress

Introduction

File permission hardening helps keep your WordPress site safe by controlling who can read, write, or run files. It stops bad people from changing or breaking your site.

When setting up a new WordPress site to keep files secure from hackers.

After installing plugins or themes to make sure they don't have unsafe permissions.

If your site was hacked and you want to fix file access to prevent it again.

When moving your WordPress site to a new server to set correct file permissions.

During regular maintenance to check and improve your site's security.

Syntax

Wordpress

chmod [permissions] [file_or_directory]

chmod is a command to change file or folder permissions.

Permissions are usually set with numbers like 755 or 644.

Examples

Sets the wp-config.php file to be readable and writable by the owner, and readable by others.

Wordpress

chmod 644 wp-config.php

Allows the owner to read, write, and run, and others to read and run the uploads folder.

Wordpress

chmod 755 wp-content/uploads

Makes wp-config.php readable only by the owner, increasing security.

Wordpress

chmod 400 wp-config.php

Sample Program

This example shows commands to harden file permissions for WordPress. It makes the important wp-config.php file very secure and sets safe permissions for files and folders inside wp-content.

Wordpress

# Secure WordPress file permissions example

# Set wp-config.php to be readable only by owner
chmod 400 wp-config.php

# Set all files in wp-content to 644
find wp-content -type f -exec chmod 644 {} \;

# Set all directories in wp-content to 755
find wp-content -type d -exec chmod 755 {} \;

# Output permissions for wp-config.php
ls -l wp-config.php

Important Notes

Always back up your site before changing permissions.

Too strict permissions can break your site, so test after changes.

Use 644 for files and 755 for folders as a safe default in WordPress.

Summary

File permission hardening protects your WordPress site from unauthorized changes.

Use chmod to set safe permissions like 644 for files and 755 for folders.

Secure wp-config.php by making it readable only by the owner (400 or 440).