psst.. this blog is on hiatus.

WordPress file permissions

After disabling php-cgiwrap, I got in the bad habit of chmod’ing files and directories to 777. Bad idea. A helpful reminder about WordPress file permissions and security got me back in line with 755 for directories, 644 for plugins and core WP PHP files, and 666 for my active theme files.

In so doing, I’ve had to disable WP-Cache, but since the site seems to be peachy since I switched back to using the PHP Apache module (default), I think the performance/availability will be fine.

Related security tidbit: Using require() with an external file to increase security on wp-config.php’s database password storage.
(more…)

Wordpress, Pair.com hosting, and php-cgiwrap

My site is hosted with Pair. Recently, I had been having lots of problems with PHP exceeding the allocated 16 megs of memory and being killed by Pair’s monitoring scripts — sometimes 3 or 4 times an hour.

I fixed the problem and thought I’d share for anyone else in my situation.
(more…)