Sorry about the need for you to alter the plugin.
I’m a little reluctant to make the change because restricting any writing to the /wp-contents/ folder will cause other things to break as well. Most all caching plugins create a folder under /wp-contents/ as well as some backup programs. WordPress itself even creates an /updates folder under it.
Per WP codex – http://codex.wordpress.org/Hardening_WordPress
/wp-content/
User-supplied content: intended to be writable by your user account and the web server process.
So no the folder permissions should not be wide open like 777. They should be 664 to allow user and group rights. They could make it as 644, but it depends on how they set up PHP execution ownership and that.
Managed hosting is great but they also can be a little too secure. Most do restrict what plugins that can be run.
Hi Mike,
Thanks for the input.
I understand your opinion, but as my mother always tells me “Don’t be right, be smart” :-).
The thing is that as the large hosting companies go into changing their methods towards security and segregation of data, and as a small customer we must align to them and not the other way around – your plugin will become an issue (I cannot update your plugin for instance without manual changes).
Thus, this was only a heads up, it is your sole decision if you want to choose and be right, I usually choose to align.
Cheers & Thanks for your time.
Ika
I am going to leave as is for now unless it becomes more of an issue. So far I haven’t hard of any other issues regarding the wp-content folder issues.
Mike
