File permission hardening in Wordpress - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main goal of file permission hardening in WordPress?

To restrict access to files and folders so only authorized users and processes can read, write, or execute them, improving security.

beginner

Which file permission setting is recommended for WordPress files?

Files should generally have permissions set to 644, meaning the owner can read/write, and others can only read.

beginner

What permission setting is recommended for WordPress directories?

Directories should usually be set to 755, allowing the owner to read/write/execute and others to read/execute only.

intermediate

Why should the wp-config.php file have stricter permissions?

Because wp-config.php contains sensitive information like database credentials, it should be set to 600 or 640 to limit access.

beginner

What is the risk of setting WordPress files or folders to 777 permissions?

Setting permissions to 777 allows anyone to read, write, and execute, which can lead to unauthorized changes and security breaches.

What permission should you set for WordPress directories to keep them secure?

A 755

B 777

C 644

D 600

755 allows the owner full access and others read and execute, which is secure for directories.

Which file permission is safest for wp-config.php?

A 777

B 644

C 600

D 755

600 restricts access to only the owner, protecting sensitive data in wp-config.php.

Why should you avoid 777 permissions on WordPress files?

A It allows anyone to modify files

B It makes files read-only

C It hides files from users

D It encrypts the files

777 lets anyone read, write, and execute files, risking unauthorized changes.

What does the permission 644 mean for a file?

A Everyone can read/write

B Owner can read/write; group and others can read

C Only owner can read/write

D Owner can execute only

644 means owner has read/write, others have read-only access.

Which WordPress folder should never be writable by the public?

A /wp-content/uploads

B /wp-includes

C /wp-content/plugins

D /wp-admin

/wp-admin contains core admin files and should be protected from public write access.

Explain why setting correct file and directory permissions is important in WordPress security.

Think about who can read, write, or execute files and why that matters.

Describe the risks of using overly permissive settings like 777 on WordPress files and folders.

Consider what happens if everyone can change your website files.