WordPress启用FTP上传与插件自动安装的权限问题咨询

Hey there, let's break down why your FTP uploads stopped working after fixing the auto plugin install, and get both features running safely together.

What's Causing the Conflict? #

When you ran chown -R www-data:www-data /var/www, you gave full ownership of all WordPress files to the web server user (www-data). That's exactly what allowed WordPress to auto-install plugins without needing FTP/SSH credentials. But here's the problem: your FTP user (whether it's a system account or custom one) isn't part of the www-data user/group, so it no longer has permission to write to those directories. That's why FTP uploads are failing.

Solutions #

Here are two secure, practical fixes—pick the one that fits your setup best:

Option 1: Add Your FTP User to the www-data Group #

This is the simplest approach. By adding your FTP user to the www-data group, it inherits the permissions needed to write to WordPress files:

1. Replace your_ftp_username with your actual FTP account name, then run:

   usermod -aG www-data your_ftp_username
   

   The -aG flag ensures you're adding the group without removing any existing ones tied to your FTP user.
2. Next, make sure directories and files in /var/www allow group write access:

   # Grant group write access to all directories
   find /var/www -type d -exec chmod g+w {} \;
   # Optional: Grant group write access to files if you need to edit them via FTP
   find /var/www -type f -exec chmod g+w {} \;
   

3. Restart your FTP service (for example, with vsftpd: systemctl restart vsftpd) and test your uploads again.

Option 2: Adjust Directory Group to Match Your FTP User's Group #

If you don't want your FTP user in the www-data group, you can instead set the /var/www group to match the one your FTP user belongs to (most default FTP setups use the ftp group):

1. Recursively change the group of /var/www to ftp:

   chgrp -R ftp /var/www
   

2. Set the setgid bit on all directories—this ensures any new files created by WordPress (as www-data) will inherit the ftp group, so your FTP user can access them:

   find /var/www -type d -exec chmod g+s {} \;
   

3. Grant group write permissions to directories and files:

   find /var/www -type d -exec chmod g+w {} \;
   find /var/www -type f -exec chmod g+w {} \;
   

4. Finally, add www-data to the ftp group so WordPress can still write to the files:

   usermod -aG ftp www-data
   

Critical Security Reminders #

• Never use chmod -R 777 /var/www—this gives every user on your server full read/write access, which is a massive security vulnerability.
• If you only need FTP access to specific directories (like wp-content/uploads), limit your permission changes to that folder instead of the entire /var/www directory. This is even safer:

  chown -R www-data:ftp /var/www/wp-content/uploads
  chmod -R g+w /var/www/wp-content/uploads
  find /var/www/wp-content/uploads -type d -exec chmod g+s {} \;
  

内容的提问来源于stack exchange，提问作者beta