How to securely set permissions on directories?

Question

System administration

Hello!
You probably know, when you upload any site to /www on the server, and it must be able to work with files, the problem arises: what rights to set so that it doesn’t break securely and tomorrow?
Now I had to fill in Wordpress, there you also need to set the rights to all this.
I found such a suggestion on stackoverflow, but even it seems to me that it is not cool to give rights to the directory to the www-data group. Or cool?
Are there other easy ways, or is this the norm?

chown www-data:www-data -R *          # Let apache be owner
find . -type d -exec chmod 755 {} \;  # Change directory permissions rwxr-xr-x
find . -type f -exec chmod 644 {} \;  # Change file permissions rw-r--r--

Answer 1

The answer on StackOverflow is correct.
Files require permissions 644, which means:
Owner - read, write
Group - read
All - read
For directories 755, which means:
Owner - read, write, execute
Group - read, execute
All - read, execute.
The extra bit for directories is needed, because without execute permission you won't be able to open the directory . It is X that allows you to open files inside a directory.

Answer 2

there is little information, you need to understand what kind of OS is on the server and how the same apache is started,
but for example How to configure apache on ubuntu correctly?

Answer 3

That's right, that's exactly what you should do, just go to /var/www before the commands

Answer 4

In addition to Igor Vorotnev
In directories for images, css, etc. disable the execution of scripts.