[wp-testers] Another Issue with the upload mechanism
Ryan Boren
ryan at boren.nu
Mon Jan 2 21:03:56 GMT 2006
On Mon, 2006-01-02 at 15:47 -0500, Aaron Brazell wrote:
> >
> > WP creates directories with the same perms as wp-content. If wp-content
> > is set to the needed perms for both server and user to write to the
> > directories, then all should be well.
> >
>
> Not entirely true, Ryan. Using my server as an example:
>
> -bash-2.05b$ ls -la | grep wp-content
> drwxrwxrwx 21 techno psacln 28672 Dec 31 15:29 wp-content
> drwxrwxrwx 4 techno psacln 172032 Dec 17 12:57 wp-content.old
>
>
> And my newly WP-created 2006 directory:
>
> -bash-2.05b$ ls -la
> total 40
> drwxrwxrwx 4 techno psacln 4096 Jan 1 19:10 .
> drwxrwxrwx 21 techno psacln 28672 Dec 31 15:29 ..
> drwxrwxrwx 4 techno psacln 4096 Dec 19 00:48 2005
> drwxrwxrwx 3 apache apache 4096 Jan 1 19:10 2006
>
>
> Now what this tells me is earlier version of WP 2 were doing what you say. 2005 is owned by techno (me), but 2006 is owned by apache...
We've never done anything with ownership. I would expect apache to be
the owner if not running suid.
Ryan
More information about the wp-testers
mailing list