iis 7 - IIS Security and Wordpress -


we self hosting wordpress on iis 7, 2008 server.

to allow automatic updates wordpress code base, had set following permissions on wordpress root installation folder:

  • iusr - modify
  • my app pool - full control

is secure configuration?

thanks in advance, chris

no,

first -

you should remove inheritance @ wwwroot , add system (full control) , administrators (full control)

second -

create administrator account application path website , use instead of basic pass through authentication (basic settings)

third -

change app pool use applicationpoolidentity , add permissions iis apppool\my app pool root of website , give read permission.


Comments

Popular posts from this blog

jQuery Mobile app not scrolling in Firefox -

c++ - How to add Crypto++ library to Qt project -

php array slice every 2th rule -