The .user.ini file is readable by web users?

"The .user.ini file is readable by web users" is what my security plugin, which I just installed, tells me.

How do I secure the .user.ini file? Do I simply need to change the chmod permissions via FTP? And if so, which permissions?

(1 votes)
Loading...

Similar Posts

Subscribe
Notify of
2 Answers
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
davegarten
7 months ago
chmod 0600 .user.ini

Of course, you also need to consider which Ownership/ Group is set on the .user.ini, and with which user the php processes run so that the whole is really safer.