As the owner of a dedicated server provided shared hosting services, you will find that many of your clients will install applications such as WordPress. So far so good. However, once they start getting stuck with file and folder permissions, they generally go crazy and set everything to 777 in order to fix the problems. Great, they get their site working! Now begin your problems.<\/p>\n\n\n\n
With these liberal file and folder permissions together with some not-so-well written plugins, it is only a matter of time before the hackers and crackers target these weak WordPress sites and start injecting all manner of redirects and mail spammers on your server.<\/p>\n\n\n\n
So, here is a nifty solution to find all those weak WordPress installations. The following find will list all WordPress installations that contain folders with 777 permissions:<\/p>\n\n\n\n
find \/var\/www\/vhosts\/*\/httpdocs\/wp-content -perm 0777 -type d | grep -v \"wp-content\/\"<\/pre>\n\n\n\nGive this a whirl on your Plesk server and take a look at the list, navigate to each folder and tighten up the permissions as below:<\/p>\n\n\n\n
cd \/var\/www\/vhosts\/dodgydomain.co.uk\/httpdocs\nfind . -type d -exec chmod 755 {} \\;\nfind . -type f -exec chmod 644 {} \\;\nchmod 750 ..\/httpdocs<\/pre>\n\n\n\nThese permission changes eliminate all unnecessary 777 permissions.<\/p>\n\n\n\n
Ok, let’s automate the whole process<\/h2>\n\n\n\n
What? You have lots of these? Then here is a nifty script to automate the process for you:<\/p>\n\n\n\n
df=`find \/var\/www\/vhosts\/*\/httpdocs\/wp-content -perm 0777 -type d | grep -v \"wp-content\/\" \\\n| sed \"s\/wp-content\/\/g\"`\n\nfor line in $df;\n do\n echo $line\n cd $line\n find $line -type d -exec chmod 755 {} \\;\n find $line -type f -exec chmod 644 {} \\;\n chmod 750 $line\n done<\/pre>\n\n\n\nThis makes things a little more difficult for any would-be injection attempts. If your directory structure is different to the standard Plesk structure simply modify the find command as required.<\/p>\n","protected":false},"excerpt":{"rendered":"