chmod in wordpress?

Question

Apache HTTP Server

Good afternoon! Such a problem! There is a dedicated server, WP sites were transferred to it. By default, the owner is vasya and the group is vasya. Rights to folders 755, files 644. And then a number of problems appeared when working from the admin panel:
1. Upload media files;
2. Install plugins without entering every time ftp accesses;
3. Update plugins and WP itself again without ftp;
4. Edit templates through the admin panel.
All this was solved as follows:
1. Changed the group to www-data;
2. I threw 775 on the folders;
3. I threw 664 on the files;
But I'm concerned about safety. Should I leave this solution or is there another one?

Answer 1

Use php parsing method as cgi/fcgi and put the rights back in place. When using mod_php, of course, all scripts are executed from under Apache and they need rights. Giving directory ownership to the www-data group is a huge security hole and should not be done.

Answer 2

I do things a little differently
for 8 years, not one site has been hacked, all customers are very satisfied.
All my sites are in Hebrew and are subject to daily hacker attacks from Arab countries.
WordPress is constantly bombing and a bunch of exploits are being flooded to capture root.
I advise you to put on the csf server on the server .