[wp-testers] Another Issue with the upload mechanism

Ryan Boren ryan at boren.nu
Mon Jan 2 21:03:56 GMT 2006


On Mon, 2006-01-02 at 15:47 -0500, Aaron Brazell wrote:
> > 
> > WP creates directories with the same perms as wp-content.  If wp-content
> > is set to the needed perms for both server and user to write to the
> > directories, then all should be well.
> > 
> 
> Not entirely true, Ryan.  Using my server as an example:
> 
> -bash-2.05b$ ls -la | grep wp-content                                                                               
> drwxrwxrwx   21 techno   psacln      28672 Dec 31 15:29 wp-content
> drwxrwxrwx    4 techno   psacln     172032 Dec 17 12:57 wp-content.old
> 
> 
> And my newly WP-created 2006 directory:
> 
> -bash-2.05b$ ls -la
> total 40
> drwxrwxrwx    4 techno   psacln       4096 Jan  1 19:10 .
> drwxrwxrwx   21 techno   psacln      28672 Dec 31 15:29 ..
> drwxrwxrwx    4 techno   psacln       4096 Dec 19 00:48 2005
> drwxrwxrwx    3 apache   apache       4096 Jan  1 19:10 2006
> 
> 
> Now what this tells me is earlier version of WP 2 were doing what you say. 2005 is owned by techno (me), but 2006 is owned by apache...

We've never done anything with ownership.  I would expect apache to be
the owner if not running suid.

Ryan




More information about the wp-testers mailing list