How to stop wordpress from changing default .htaccess permissions to 444

Your site has likely been hacked. My site had the Darkleech infection, which injected some malicious code into wp-includes/nav-menu.php, causing .htaccess to reset to 444 on any page load.

I’d recommend you install the Sucuri plugin and let it restore any files that have been corrupted. Assuming your site was hacked, use their Post-Hack tab to reset plugins, passwords, and keys. Also check to make sure another admin user wasn’t created. Use their Hardening tab to secure as much as you can. You could also install Wordfence for more security.

If you make adjustments and the problem keeps coming back, you likely have a root-level breach on your server, and then you have to work with your hosting provider to try to clean out the infection.

Related Posts:

  1. Standard permissions for wordpress; Plugin installation asks for FTP credentials
  2. 403 Forbidden – You don’t have permission to access /wp-admin/admin-ajax.php on this server
  3. Error Message from W3 Total Cache when .htaccess Rules Cannot Be Modified? [closed]
  4. Prevent WordPress installing plugins and themes via Admin
  5. Linux Permissions and Ownership for WordPress
  6. WordPress FTP/media directory permissions problem?
  7. to perform the requested action wordpress needs to access your web server. please enter your ftp
  8. What security concerns should I have when setting FS_METHOD to “direct” in wp-config?
  9. How can I stop WordPress from prompting me to enter FTP information when doing updates?
  10. wordpress on localhost lamp doesn’t let me install plugins
  11. Prompted for FTP details even with FS_DIRECT set to true
  12. How to prevent a post from being deleted?
  13. Is there a way (plugin?) to restrict a user to being able to edit just one page?
  14. Security and .htaccess
  15. Can’t install new plugins because of the error “Could not create directory”
  16. Cannot install plugins even though www-data has write permissions
  17. Why does WordPress still not support SFTP?
  18. Why does WordPress require a ftp server to be running on the webserver to transfer plugins?
  19. What does a security risk in a plugin look like?
  20. WP Config for FTP credentials
  21. How does WordPress update plugins, without running into permissions issues?
  22. Plugins won’t auto-update on IIS
  23. Add .html extension to custom post type taxonomies
  24. Leverage browser caching not working after updating .htaccess
  25. Can I ignore caching of a plugin in W3 Total Cache? [closed]
  26. Is it possible to block subscriber users to changing its password?
  27. Why would WordPress request FTP information when it can write to the file server?
  28. Upgrading WordPress 4.0 asks for FTP password
  29. How to install WordPress Multisite with different domains under the same subdirectory?
  30. WordPress roles – Protect administrator role
  31. htaccess and wordpress config files are regularly over written
  32. Could not create directory
  33. Creating Custom Roles for use on a WordPress Multi-site Instance?
  34. How to import 55k images (uploaded via FTP) into WordPress Media libary? [closed]
  35. Moving WordPress from host without FTP?
  36. Why does deactivating a plugin cause error: “You do not have sufficient permissions to access this page”?
  37. Can’t use the built-in wordpress install/upgrade plugin feature [closed]
  38. Plugin/Folder permission issues with Azure
  39. Can I upgrade plugins via FTP?
  40. WordPress redirect all 404 pages to the Homepage
  41. Plugin Expires Headers – W3 Total Cache [closed]
  42. Correct wp-content ownership and permissions
  43. How can I serve a text file at a custom URL
  44. Advanced Custom Fields/User Role Editor – how to hide ACF for certain users?
  45. How create a role with admin capability less 1 or 2?
  46. 500 Internal Server Error when updating htaccess
  47. W3 Total Cache: Load CSS asynchronously for better PageSpeed score? [closed]
  48. Write to / remove from default .htaccess file from plugin?
  49. Are these wp-content permissions safe?
  50. Restored WordPress on new Server – Can’t auto-update plugins
  51. Changed permalink structure. Need help with redirecting old posts
  52. Landing Page Redirect Chain | http->https->https www
  53. Possible htaccess configuration issue for HTTPS websites by WP Fastest Cache plugin? [closed]
  54. With W3 Total Cache when I publish a post it does not appear in the homepage. Only if i purge all cache [closed]
  55. W3 Total cache “empty all caches” and no stylesheets render [closed]
  56. Getting WPTouch and W3 Total Cache to Work Together [closed]
  57. Headers Content-Security-Policy CSP Major Issue
  58. Plugin updates change folder permissions
  59. Install (enable) plugins on multisite, on localhost
  60. Create a multisite network for an existing installation
  61. admin-ajax.php warning max input vars exceeded on layered pop plugins [closed]
  62. Is it wise to add plugins to the Object Cache?
  63. Reoccurring 404 Errors on all subpages
  64. transfer a file from one domain to another via wp
  65. Problem with updating a plugin
  66. Updating plugins asks for FTP information, why? (this is a new one)
  67. Is there a directory my plugin can write files to that cannot be viewed via the browser/url?
  68. Lock access to plugin options
  69. Is W3 Total Cache supposed to delete the local files after they are uploaded to CDN? [closed]
  70. plugin links not working [closed]
  71. Can’t Install Standard Plugins on a Local MAMP installation
  72. w3 Total Cache not Caching – Requested URI is rejected [closed]
  73. Install and Update plugins on a VPS WordPress installation
  74. Add menu page issues (permissions & position)
  75. Redirect to another page using contact form 7? [closed]
  76. Remove .htaccess portion upon plugin deactivation?
  77. Advanced Custom Fields – Disable Users to Edit Custom Fields
  78. Is there any way to make myself an admin?
  79. Why is the ‘Gutenberg’ Plugin generating an ‘Inconsistent File Permissions’ error when other Plugins, with the same permissions, do not?
  80. Edit Permalink Structure For Custom Post Type or Modify .htaccess?
  81. Custom url rewriting
  82. What are the correct permissions so WP doesn’t ask for FTP credentials if installing plugin?
  83. “W3 Total Cache” with “What Would Seth Godin Do” (and widgets?!)? [closed]
  84. How to add support for caching plugins for my own plugin?
  85. disabling ftp on wordpress
  86. WordPress won’t allow for updates to plugins or WordPress Core
  87. To perform the requested action, WordPress needs to access your web > server
  88. WordPress permissions error with admin account
  89. Why is my WordPress Plugin page requesting my FTP Login Credentials?
  90. WordPress unable to write files in the server
  91. Plugins successfully uploaded via FTP but they are not on my site
  92. Object Caching Plugin force every plugin to cache objects?
  93. Plugins & backup not working correctly on new Digital Ocean server
  94. WordPress rewrite rules not working
  95. Do rewrites added with add_rewrite_rule() persist after plugin deletion?
  96. Sociable buttons displaying seemingly at random [closed]
  97. How to hide plugin options for editors via functions.php
  98. How to write to the plugin’s directory?
  99. W3 Total Cache Help – How to update DNS Zone for a static domain [closed]
  100. What archive plugin works with W3 total cache? [closed]

Leave a Comment

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)