WordPress htaccess不断更改为chmod 444和777

Question

After every WordPress release appears on my admin panel, my website .htaccess file becomes chmod 444 or 777 and overwrite my htaccess settings. I try to change the chmod and edit it from ftp and from the console. But It keeps returning to chmod 444 or 777. The work-around solution is that i have to update wordpress from the administration panel, then I can change the .htaccess chmod to 644 and edit it without any problem.

Please help me resolve this issue.

Thank you,

Answer 1

升级WP的正确方法是通过管理面板...。如果下载安装并手动完成所有操作，则需要检查用户的umask ...这将对新文件应用权限。可能是权限更改为444的其他原因，但真正的解决方案是通过管理面板进行升级

Answer 2

Solved the issue by renaming wp-admin to wp-admin_old and wp-includes to wp-includes_old . Then I uploaded latest and fresh folders from the official website: https://wordpress.org/ . DO NOT FORGET TO DELETE 'wp-admin_old' & 'wp-includes_old'! Because they have a hidden backdoor that keeps changing your wordpress settings. That's why renaming them then deleting them is the only way to get rid of malware.

Answer 3

This probably happened due to an infection, which may have changed more than the core Wordpress files. Simply updating the wp-includes directory may not permanently solve the problem: https://wordpress.stackexchange.com/a/191570/20963