SiteCare – File Permissions Manager
| 开发者 | fstab |
|---|---|
| 更新时间 | 2026年7月23日 06:41 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.2 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
File and directory permissions are one of the easiest things to get wrong on a WordPress site - and one of the most consequential. Set them too loose and you hand attackers an easy way in; set them too tight and updates, uploads, and plugins quietly stop working. The correct values are well known (755 for folders, 644 for files, locked-down config files), but applying them the usual way means FTP or SSH access, recursive
chmod commands, and a real risk of breaking your site with a single typo.
SiteCare File Permissions Manager removes all of that. From one screen under Tools → Permissions, it recursively applies the safe, recommended permissions across your entire WordPress install - no FTP, no shell, no command line. The recommended values are pre-filled, so for most people it really is a single button.
Features
- One-click recursive chmod for the whole WordPress site.
- Instant diagnosis - the screen opens with a clear "X items are writable by everyone" warning whenever risky permissions are found, so you know right away whether you have a problem.
- Separate, recommended values for directories (755) and files (644).
- Beginner-friendly checkboxes for owner / group / world (read, write, execute) - no need to understand octal numbers. The matching number is filled in for you and stays in sync.
- Plain-language explanation of exactly what each setting means ("You: open & view & change. Everyone: open & view"), updated live as you change the boxes.
- Dangerous values are blocked - world-writable permissions like 777 or 666, unreadable files (000) and non-traversable folders can never be applied, both in the browser and on the server, so you cannot lock yourself out or open your site up by mistake.
- Advanced overrides for sensitive files (.htaccess, wp-config.php, .user.ini, php.ini) with three modes: recommended read-only (444), the same value as your files, or a custom value per file.
- Live, expandable file tree that shows the current permission of every file and folder, with colour hints for safe vs. risky values.
- Real progress bar with batched processing, so it works on large sites without hitting PHP timeouts.
- Ships fully translated into five world languages - German, Spanish, French, Portuguese and Russian - plus Czech.
- No external scripts, fonts or trackers are loaded.
安装:
From your WordPress dashboard (recommended)
- Go to Plugins → Add New and search for "SiteCare File Permissions Manager".
- Click Install Now, then Activate.
- Download the plugin .zip file.
- Go to Plugins → Add New → Upload Plugin and choose the .zip.
- Click Install Now, then Activate.
屏幕截图:
常见问题:
What permissions should I use?
The defaults are the widely recommended values: 755 for folders and 644 for files, and read-only 444 for sensitive configuration files. If you are not comfortable with the numbers, just use the checkboxes - the plugin explains in plain language what each choice does and fills in the number for you.
Can I set 777? Is it safe?
No, and that is on purpose. World-writable permissions such as 777 or 666 let anyone on the server write to your files and are a common way sites get hacked - there is no legitimate reason to set them site-wide. The plugin blocks them (along with other unsafe values like 000 or non-traversable folders) both in the browser and on the server, so you cannot apply them even by accident.
What if php.ini or .user.ini do not exist on my server?
Nothing happens for them. The plugin only changes files that actually exist, and missing files are skipped safely.
Is it safe to run on a large site?
Yes. Processing is done in small batches with a live progress bar, so it does not hit PHP execution time limits.
Who can use it?
Only administrators (users with the manage_options capability) can open the screen or run any action.
Does it load anything from third-party servers?
No. All styles and scripts are bundled with the plugin. Nothing is loaded from external servers.
更新日志:
2.3.13
- Corrected the "Tested up to" header to the major WordPress version for wp.org compliance.
- The permissions screen is now ad-free: notices and promos injected by other plugins no longer appear inside it.
- Czech translation is back on board alongside the five world languages.
- Unified translations across the SiteCare family: five world languages (German, Spanish, French, Portuguese, Russian).
- Refreshed screenshots.
- New scpc_risk_cache_ttl filter to tune how long the risk diagnosis is cached.
- Shortened the directory description to fit WordPress.org limits.
- New: instant diagnosis - the screen now opens with a clear "X items are writable by everyone" warning when risky permissions exist on your site.
- Dismissing the support box now sticks across browsers and devices (stored per user on the server).
- Housekeeping: refreshed screenshots and link attribution.
- Preset chips (755, 644 ...) now show a plain-language tooltip explaining what each value does.
- More breathing room between the support box and the permissions section.
- Tidied up the permissions screen: each matrix is now a self-contained card with its own header, the value + presets sit on one row, and both columns line up cleanly.
- Balanced the two-column layout: the file tree now matches the height of the settings column, removing the empty space.
- Moved the support box directly under the intro notice; the info icon is now blue and better aligned.
- Footer links no longer underline on hover; tidied up the "safe defaults" notice.
- Unified the footer across the SiteCare plugin family; the SiteCare link now points to app.sitecare.cz.
- Added a subtle link to SiteCare for people who manage several sites and want them all handled from one dashboard.
- New: beginner-friendly checkbox editor for owner / group / world (read / write / execute). No octal knowledge needed - the number is filled in and kept in sync automatically.
- New: live plain-language explanation of what each permission choice actually means, so you always know what you are about to apply.
- New: safety guardrails. Dangerous values (world-writable like 777/666, unreadable 000, non-traversable folders, setuid/setgid) are now hard-blocked in the browser and re-checked on the server - they can never be applied.
- Improved: clearer, decluttered interface with contextual "i" info tooltips, a primary "Apply safe permissions" action and a cleaner responsive layout.
- Changed: removed the one-click Undo. With dangerous values now impossible to apply and permissions safely re-runnable, it was no longer needed.
- Renamed to SiteCare – File Permissions Manager, part of the SiteCare plugin family
- New: confirmation step before changing permissions, showing exactly how many files and folders will be affected.
- New: interface now follows your chosen WordPress admin colour scheme.
- New: file tree is fully keyboard accessible.
- Improved: errors are shown inline instead of browser pop-ups.
- Improved: refreshed icons and a friendly way to support the plugin (review, translate, donate).
- New two-column interface with a live file tree and real progress bar.
- Advanced overrides for .htaccess, wp-config.php, .user.ini and php.ini (recommended / global / custom).
- Batched, timeout-safe processing.
- Full internationalization with translations for major languages; no external resources loaded.
- Security hardening: nonces, capability checks, path-traversal protection, symlink skipping.
- Initial release.