Comments on: WordPress How-To: Force Direct Filewrites For Upgrades

By: The Kracken

The Kracken — Fri, 03 Feb 2012 10:41:19 +0000

Thanks for this post.
I’m glad that you broke this down enough for me to understand that I’m in the same situation as you were. I just am so hesitant to assign 0777! I have some sites I admin and host on a dedicated VPS and I’m hesitating to offer this option to my clients. Though, the trade off is installing/uninstalling plugins for them.

Are there no other solutions that are more secure?

BTW, and this is off-topic but still relevant: what if I choose to manually install/upgrade/uninstall plugins/themes/or even core how would I ensure that in the install or delete process i would enter/remove the right DB tables/entries ?

By: Dan

Dan — Tue, 10 Jan 2012 14:49:10 +0000

I added the 3 lines to wp-config like you recommended but I am still unable to update plugins and am getting owner permission error.
I have WP installed on a managed VPS running Plesk 9 control panel.
Any recommendation welcome.

By: WordPress, DSO and Permissions | Ipstenu on Tech

WordPress, DSO and Permissions | Ipstenu on Tech — Mon, 07 Nov 2011 15:06:39 +0000

[...] In part, this is WordPress’s fault, but really it’s an unholy combination of things. Alex King explains why it happens, and as of WordPress 2.8, you can fix this yourself.Just override the [...]

By: WillieMan

WillieMan — Fri, 14 Oct 2011 21:56:29 +0000

Thanks a million, this really helped me out when I was about to give up on this.

By: Kaname

Kaname — Tue, 16 Nov 2010 03:47:58 +0000

Thank you!! I was going to mess with the WP code, but you save me!!

By: Alex (Viper007Bond)

Alex (Viper007Bond) — Tue, 09 Nov 2010 07:23:27 +0000

Yes as your files are writable by the server. If a hacker gains access to your server, then they can modify/delete/etc. any file they want.

The FTP option is the best solution, it’s just slow.

By: links for 2010-10-23 | Ronaldo Richieri

links for 2010-10-23 | Ronaldo Richieri — Sat, 23 Oct 2010 16:03:26 +0000

[...] WordPress How-To: Force Direct Filewrites For Upgrades « Viper007Bond.com (tags: wordpress upgrade update ftp) [...]

By: Blazing Fast WordPress Upgrades Without a Login | Blog Smarter

Blazing Fast WordPress Upgrades Without a Login | Blog Smarter — Thu, 05 Aug 2010 21:35:12 +0000

[...] first ran across these setting at Viperbond007.com To see many more wp-config.php advanced configs check out [...]

By: Arpit

Arpit — Tue, 22 Jun 2010 02:09:21 +0000

I have used the method suggested for WP 2.8+. It works. Just one question though!

ANY SECURITY RISKS??

Thanks.

By: Bary

Bary — Thu, 03 Jun 2010 13:37:37 +0000

Used the .config file solution and I’m in business. Thank you for a great post.

By: Philip M. Hofer (Frumph)

Philip M. Hofer (Frumph) — Wed, 21 Apr 2010 16:06:19 +0000

So glad I use IIS7 right now.

By: Viper007Bond

Viper007Bond — Wed, 21 Apr 2010 09:49:26 +0000

Ah, so it requires a module to do it.

Read the message at the top though. That module isn’t functional.

By: Philip M. Hofer (Frumph)

Philip M. Hofer (Frumph) — Wed, 21 Apr 2010 00:56:19 +0000

Found it:
http://httpd.apache.org/docs/2.0/mod/perchild.html#assignuserid

By: Viper007Bond

Viper007Bond — Wed, 21 Apr 2010 00:28:47 +0000

AFAIK PHP (Apache) is only able to write as itself.

By: Philip M. Hofer (Frumph)

Philip M. Hofer (Frumph) — Tue, 20 Apr 2010 17:03:47 +0000

now I just have to find a define when the file writes to the server it doesn’t write it as the apache owner, and writes it as the user owner

Any thoughts?