- This topic has 20 replies, 9 voices, and was last updated 7 years ago by
.
-
Posts
-
Thank you!
We just have a couple follow up questions to make sure we understand everything completely:
1. It is the setting of the downloads folder to permission 0700 that will make the files inaccessible, even if someone finds the links to them, correct?
2. Our thumbnails for all of our eStore products are located within the master downloads folder. When we set the master downloads folder to permission 0700, it then makes it so that our thumbnail images are no longer displayed on the site. It seems as though we will need to move our thumbnail images to be outside of the downloads folder. However since we have hundreds of eStore products, it will take quite a bit of work for us to update all of the URL’s to the thumbnail images for each product. Is there any way that we can change the permissions of the thumbnail image folders (that reside within the master downloads folder), so that even when the master downloads folder is set to permission 0700, the thumbnail images will still be accessible and displayed on the site?
3. Just to make sure we have the .htaccess correct, we have placed an .htaccess file in the master downloads folder, with only this bit of text within it:
Options -Indexes
Is that correct?
Many thanks…
1. Yes
2. I don’t know how to do what you explained here unfortunately. You should not keep the image thumbnails in the same folder as your actual downloadable items.
3. Yes, that will do. There are more strict rules you can put in there but do it progressively. First see how you go with the changes you made then if you need more, you can apply more strict rules in there.
Hello,
We have an issue whereby our root download folder keeps getting its permissions set back to 0755 even though we set it to 0700 as instructed. We contacted the web host and they said that WordPress automatically changes file permissions.
Could you please confirm whether this is true or suggest what else might be causing this? Should our downloads folder for eStore not be within the wp-content folder?
eStore doesn’t change any folder permission. So I am not sure what your hosting provider is saying.
The correct folder permission is 755 though.
Right, not eStore necessarily but WordPress itself. Would WordPress be changing the file permissions for folders within the wp-content folder upon updates?
- You must be logged in to reply to this topic.