November 13, 2015 at 10:35 pm #25334
We just have a couple follow up questions to make sure we understand everything completely:
1. It is the setting of the downloads folder to permission 0700 that will make the files inaccessible, even if someone finds the links to them, correct?
2. Our thumbnails for all of our eStore products are located within the master downloads folder. When we set the master downloads folder to permission 0700, it then makes it so that our thumbnail images are no longer displayed on the site. It seems as though we will need to move our thumbnail images to be outside of the downloads folder. However since we have hundreds of eStore products, it will take quite a bit of work for us to update all of the URL’s to the thumbnail images for each product. Is there any way that we can change the permissions of the thumbnail image folders (that reside within the master downloads folder), so that even when the master downloads folder is set to permission 0700, the thumbnail images will still be accessible and displayed on the site?
3. Just to make sure we have the .htaccess correct, we have placed an .htaccess file in the master downloads folder, with only this bit of text within it:
Is that correct?
Many thanks…November 13, 2015 at 10:58 pm #25335adminKeymaster
2. I don’t know how to do what you explained here unfortunately. You should not keep the image thumbnails in the same folder as your actual downloadable items.
3. Yes, that will do. There are more strict rules you can put in there but do it progressively. First see how you go with the changes you made then if you need more, you can apply more strict rules in there.September 23, 2016 at 11:38 pm #25336
We have an issue whereby our root download folder keeps getting its permissions set back to 0755 even though we set it to 0700 as instructed. We contacted the web host and they said that WordPress automatically changes file permissions.
Could you please confirm whether this is true or suggest what else might be causing this? Should our downloads folder for eStore not be within the wp-content folder?September 24, 2016 at 11:51 pm #25337adminKeymaster
eStore doesn’t change any folder permission. So I am not sure what your hosting provider is saying.
The correct folder permission is 755 though.September 26, 2016 at 3:27 pm #25338
Right, not eStore necessarily but WordPress itself. Would WordPress be changing the file permissions for folders within the wp-content folder upon updates?September 26, 2016 at 7:25 pm #25339wzpModerator
No, it does not. But, if you are using security related plugins, they “might.”
- You must be logged in to reply to this topic.