iis 7 - IIS Security and Wordpress -
we self hosting wordpress on iis 7, 2008 server.
to allow automatic updates wordpress code base, had set following permissions on wordpress root installation folder:
- iusr - modify
- my app pool - full control
is secure configuration?
thanks in advance, chris
no,
first -
you should remove inheritance @ wwwroot , add system (full control) , administrators (full control)
second -
create administrator account application path website , use instead of basic pass through authentication (basic settings)
third -
change app pool use applicationpoolidentity , add permissions iis apppool\my app pool root of website , give read permission.
Comments
Post a Comment