WordPress htaccess keeps changing to chmod 444 and 777

Question

After every WordPress release appears on my admin panel, my website .htaccess file becomes chmod 444 or 777 and overwrite my htaccess settings. I try to change the chmod and edit it from ftp and from the console. But It keeps returning to chmod 444 or 777. The work-around solution is that i have to update wordpress from the administration panel, then I can change the .htaccess chmod to 644 and edit it without any problem.

Please help me resolve this issue.

Thank you,

Answer 1

升级WP的正确方法是通过管理面板...。如果下载安装并手动完成所有操作，则需要检查用户的umask ...这将对新文件应用权限。可能是权限更改为444的其他原因，但真正的解决方案是通过管理面板进行升级

Answer 2

Solved the issue by renaming wp-admin to wp-admin_old and wp-includes to wp-includes_old . Then I uploaded latest and fresh folders from the official website: https://wordpress.org/ . DO NOT FORGET TO DELETE 'wp-admin_old' & 'wp-includes_old'! Because they have a hidden backdoor that keeps changing your wordpress settings. That's why renaming them then deleting them is the only way to get rid of malware.

Answer 3

This probably happened due to an infection, which may have changed more than the core Wordpress files. Simply updating the wp-includes directory may not permanently solve the problem: https://wordpress.stackexchange.com/a/191570/20963