Correct folder permissions?

For starters, the WordPress Codex has a wealth of information on this very topic. For the sake of brevity that should take care of most of it; however, there are some relievant points that should be made:

  • If you do not wish WordPress (essentially PHP) to have access to the file system with the exception of dynamic static assets such as images or cache then leaving your permissions as is and only changing the ownership of the wp-content/uploads and wp-content/cache folders to be the same user|group that runs PHP should be sufficient. Please keep in mind that some plugins require the wp-content folder be made writeable, but in such cases typically you will be notified. In some cases, this may require assigning 755 permissions.
  • You will need to manually upload any relivant files during upgrade of core or plugins that have updates available. This will break the default mechanism of auto updates for core and the streamlined maintenance mode functionality utilized during the update process (both core and plugins).
  • Security of your server is paramount, I would suggest also thoroughly evaluating the items outlined in Hardening WordPress to ensure that you are running secure environment.

Related Posts:

  1. Installing wp3.2.1 on IIS; getting empty sessions
  2. Permission functions within wordpress
  3. WP white screen of death after duping a site that works fine on same server
  4. Setting $_SERVER[‘HTTPS’]=’on’ prevents access to wp-admin
  5. Remove update nags for non-admins [duplicate]
  6. Any guides on creating custom admin pages?
  7. Remove Customize Background and Header from Appearance admin menu without CSS or JS
  8. Remove admin bar for subscribers
  9. Namespacing WordPress project according to FIG standards
  10. renaming an admin menu item with decimal array index number
  11. Jquery no more loading, load-scripts.php not found (404)
  12. Admin Bar (Toolbar) not showing on custom PHP file that loads WordPress
  13. How do I remove a require_once admin panel from the parent theme from the child theme functions.php?
  14. Handling error states with admin_post
  15. Allow authors to post only in categories they create in WordPress
  16. Does wordpress allow me to add a php file to the root directory to execute custom scripts?
  17. Install will not load: PHP does not have MYSQL installed
  18. Failed to open stream / no such file or directory
  19. Adding Field to Profile “Name”
  20. Admin Menus – Name Menu different from first Submenu [duplicate]
  21. Add a Custom Class to Admin Menus
  22. What’s the proper way to use wp_enqueue_script/style?
  23. When is is_admin() available?
  24. Creating a new page and automatically associating it with a template in WordPress
  25. Unable to set right time in admin and frontend template
  26. Create a quick start wordpress installation [closed]
  27. List User order by ID in Descending order (Backend)
  28. Why is this Ajax not working?
  29. Change the actual (or viewable) WordPress directory structure
  30. Admin Options page. Save as Array
  31. Accessing site’s root from themes folder
  32. Custom location for attached images
  33. Using a `Template Parts` folder instead of an `Includes` folder in a Custom WordPress Theme
  34. WooCommerce – Email admin with new user details
  35. How to Arrange PHP Files to Allow for Multiple Types of Pages?
  36. Must I download entire WP directory for each separate instance/website that uses WP?
  37. Selectbox in admin panel function linking to CSS
  38. How can I fix WordPress installation errors?
  39. Sort custom meta column by other meta value
  40. PHP Fatal error: Uncaught Error: Call to undefined function wp_kses_normalize_entities() in new wordpress installation
  41. Fresh Install WP error – “The site is experiencing technical difficulties” [closed]
  42. subdirectory index.php is not working
  43. custom user role wordpress – grant guest access to edit.php without insert/update/delete
  44. running wp-cron.php using php not wget
  45. Cannot execute php files in wp-content
  46. Accessing an image folder inside public web directory
  47. Programmatically create page when saving custom post type post
  48. WordPress installation permission errors
  49. Workaround for: PHP syntax error, unexpected T_STRING in load.php on line 1104 (when installing)
  50. Building a WordPress App
  51. How can I open up my administrative panel to everyone?
  52. PHP in CSS file?
  53. retain querystring values when savincustom options in admin
  54. Get categories names as an array to use it in theme settings
  55. Get Page ID from Backend
  56. Can not add admin notices from the edit_user_profile_update hook (notices not being displayed)?
  57. Removing custom sort order from admin page listing
  58. I installed WordPress locally now how do I login?
  59. Plugin can’t write to database even though permissions appear correct?
  60. Adding a ‘style=’ bit to image_send_to_editor output
  61. Get options from database using php class
  62. Limit ‘contributers’ abilities in WordPress
  63. In PHP how do I make my navigation bar show certain links to admins only?
  64. Woocommerce display orders with products from specific categories to specific admins
  65. PHP warning – Use of undefined constant ‘FORCE_SSL_LOGIN’ ‘FORCE_SSL_ADMIN’ on wp-config.php
  66. admin panel – How to remove “delete” button from category editing page
  67. wordpress email checker on domain
  68. problem connecting to the administrator
  69. Why can’t I connect to the wordpress install page with Nginx?
  70. How to add a DELETE button to the “Edit User” WordPress admin page?
  71. New user – Create a folder
  72. PHP error on local server install
  73. Editing the term_order field
  74. Access to “My Site” is missing from the admin bar
  75. WordPress and WordPress-test-lib not getting added to tmp folder
  76. Autoloading Classes in Plugins
  77. All content deleted when WP was reinstalled in another machine
  78. How do I prevent a folder from reappearing in my home directory?
  79. Resource 404 error on multisite subdirectory install
  80. wordpress ajax return 0
  81. Plugin PHP write permissions
  82. Dynamic form variables for post meta
  83. 403 (Forbidden) delete file image in themer folder
  84. Include administrator in author list
  85. Shortcodes (with a space) added to php Sample
  86. Image not displayed
  87. 3 domains, 1 wordpress install, redirecting and changing domains on live site
  88. Adding Media button to only pages
  89. Correct Syntax for uploading files to custom directory in WordPress
  90. Can I have a php site on subdirectory of WordPress?
  91. Forbid certain users to access a specific page
  92. One folder to be accessible by one user
  93. Exclude Everywhere but Admin Area?
  94. WordPress directories not writable after PHP version upgrade
  95. AJAX WP_Query’s order and orderby parameters not working
  96. How to use url and amin-ajax.php
  97. Differences and dis/advanages between: Fast-CGI, CGI, Mod-PHP, SuPHP, PHP-FPM
  98. Custom Filtering date with newsletter
  99. WordPress critical error after trying to update to 6.2 – Fatal error: Allowed memory size of 268435456 bytes exhausted
  100. Custom plugin doesn’t show in admin menu – when code added, displays an empty page
error code: 523