Feb 21

WordPress asks for connection info during upgrade.

After migrating all of my sites to the VPS, I noticed WP auto upgrade asks me for FTP login every time I upgrade a plugin.

I was a bit puzzled at first because I have never seen that before, and the upgrade process is dramatically slower this way.

After googling, I realized that all the WP files are now owned by my webroot account and apache no longer has exclusive access to them.

the simple fix was to give apache ownership of the WordPress directory.

#: chown -R   apache-user: wordpressRoot

This does pose a potential security risk. However, this already exists on every WP site that has auto upgrade working. Most shared hosts will run the apache instance under your username so you don’t see this problem.

If you are concerned about security, I would suggest you leave the permissions as they are… or use Drupal. =p

Popularity: 1% [?]

Posted in: Development, Other.
Tagged: · ·

This entry was posted on Sunday, February 21st, 2010 at 3:35 pm and is filed under Development, Other. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

←
→
  • eleos

    That's not a security risk dude.

  • http://www.frankleng.me Frank Leng

    I think it is.
    It may not be an immediate one, but making the apache user the owner of all of ur root files can't be good. would not do that in a mission-critical environment.

See also: