[wp-trac] [WordPress Trac] #33966: Wordpress file ownership.

WordPress Trac noreply at wordpress.org
Thu Oct 1 05:23:46 UTC 2015


#33966: Wordpress file ownership.
----------------------------+-----------------------------
 Reporter:  blakemoore123   |       Owner:
     Type:  defect (bug)    |      Status:  closed
 Priority:  normal          |   Milestone:
Component:  Filesystem API  |     Version:  4.3.1
 Severity:  normal          |  Resolution:  invalid
 Keywords:                  |     Focuses:  administration
----------------------------+-----------------------------
Changes (by dd32):

 * status:  reopened => closed
 * resolution:   => invalid


Comment:

 Trac is not a support avenue, and any discussion can continue without the
 ticket being open if anyone feels like chiming in.

 The following resources may include some information which is valuable to
 you:
  * https://codex.wordpress.org/Changing_File_Permissions
  * http://codex.wordpress.org/Hardening_WordPress

 In short, WordPress requires FTP access in all cases except when the
 following conditions are met:
  1. The files are writable
  2. The files are owned by the current process owner
  3. New files creates are owned by the current process owner

 Group writable is not enough, due to !#3 above, that's the crucial part,
 WordPress needs to be able to create files which it believes are going to
 be accessible by the account owner via FTP. WordPress cannot peer into the
 operating systems group or ACL structures, so has no idea if whatever
 group is assigned to the files is useful to the owner or not - for this
 reason, Groups are ignored entirely.
 Long story short: Your hosting environment is not compatible with what
 WordPress supports for non-FTP upgrades.

 There exists several workarounds, including writing a plugin which forces
 WordPress not to use FTP - this is not a recomended or supported scenario.

 One exception to the above is that Automatic Background Updates can occur
 for WordPress core for maintenance releases as long as the files are
 writable, WordPress has no need to create/delete files in this situation
 and file attributes such as the owner or group won't change in that
 process.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33966#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list