WordPress File Permissions: The Developer’s Security Checklist

Incorrect file permissions can either lock you out of your site or leave it wide open to hackers. This post explains WordPress file permissions in plain English: what the numbers mean, which permissions are correct for core files, wp-content, and wp-config.php, and the most common permission mistakes (777 on directories, 400 on wp-config, inconsistent staging/live permissions). Includes an audit checklist, an automated permission script, and a table of correct values for every file and directory.