Posts Tagged ‘rights’

Commonly,

• To allow your users, subscribers, etc.  to upload medias (images, videos, documents, sounds) and insert them in their posts/pages for share,
• Or, to let some plugins work properly

you need to set permissions for some folders (ex. “UPLOADS” folder commonly in your “wp-content” folder), to a 777 permission, which means that you allow yourself and the whole world to read, write and execute anything in these folders and usually its subfolders. This opens a vulnerability hole to some malicious users to inject and execute scripts in this directory and gain access of the back office resources of your website which can be very dangerous.

Read the rest of this entry »