Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I changed the owner/group of the wp-config.php file to www-data (Apache's user).

I changed the file permission to 0500.

Is that more secure than leaving my normal user as the owner and file permission of 0755?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

"More secure" is relative - making apache the owner opens the file for potential remote access more so than if it were owned by your user. After all, I assume there's no process listening on an open socket running with your user credentials?

Pedantry aside, the file permissions themselves could preferably be 0400, as apache/mod_php only needs to read and not execute the file.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.