[wp-trac] [WordPress Trac] #37264: Please do not chmod 666 the wp-config.php file on installation.

WordPress Trac noreply at wordpress.org
Sun Jul 3 22:45:05 UTC 2016


#37264: Please do not chmod 666 the wp-config.php file on installation.
-----------------------------+------------------------------
 Reporter:  chriskuehl       |       Owner:
     Type:  defect (bug)     |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Upgrade/Install  |     Version:  trunk
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------

Comment (by Presskopp):

 {{{
 This file is initially created with 644 permissions, and it's a hazard to
 leave it like that. See Security and Hardening.

 wp-config.php should be 440 or 400 to prevent other users on the server
 from reading it.
 }}}

 https://codex.wordpress.org/Changing_File_Permissions

 Component = Security?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37264#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list