http abather net new 2017 content uploads

Are you curious about where the content of your website is stored? Or have yous heard of wp-content on your WordPress site and want to learn more about information technology?

A WordPress website is made up of many files and folders. wp-content is one of the key folders as it contains your website's content, and the themes and plugins installed on your site. If this folder is accidentally deleted, your website will crash.

At MalCare, we've seen many cases where WordPress websites crashed because a hacker has meddled with the wp-content. Since many website owners never visit the backend of WordPress and check the wp-content, it makes it an ideal spot for hackers to inject malware. They also hide backdoors that requite them a secret entry betoken into your site.

Learning nigh what hackers can do the wp-content repository tin can be alarming. But don't worry!

In this guide, we've simplified everything you demand to know about the wp-content. You'll find out what the folder does and how to employ it. Next, you'll larn how to hibernate information technology or prevent it from being accessed by unauthorized users.

TL;DR: The wp-content  is an integral part of your WordPress site. To ensure it is protected, we recommend installing a WordPress Security Plugin (MalCare). The plugin will browse and protect your WordPress files and folders from hackers. It will also automatically take backups of your site regularly and store them safely.

What Is The WP-content Folder?

Equally nosotros mentioned in the introduction, a WordPress website is made of many files and directories. It is created by default at the time of building your website and is 1 of the most crucial folders of your website.

Every image that y'all upload, every theme and plugin that y'all install on your website is stored in this folder (more details in the next section). In other words, any files that don't get stored in the database are stored here. If the folder gets deleted, your website will crash and you will need to rebuild it from scratch.

Generally, website owners don't apply this folder. Just sure occasions may arise when y'all need to admission it.

For instance, nosotros have installed a plugin on our WordPress website. Only the plugin caused the site to malfunction as information technology was not uniform with the version of WordPress nosotros were running. We couldn't disable it on the WordPress dashboard. So we had to go to the wp-content folder to delete the plugin in order to access our site.

Recommend read: Beginner's Guide to Understanding WordPress File Construction & Database

How To Access The WP-Content Folder

To admission the wp-content binder, y'all need to admission the WordPress root directory. Here'south what to exercise:

1. Log into your web hosting business relationship (e.g. WP Engine).

two. Access cPanel and open File Manager.

iii. Hither, you will see a folder named 'public_html'. This folder resides on your web server and is made upward of WordPress files and sub-folders that all contribute to the functioning and appearance of your website.

four. Within the public_html folder, you volition find iii chief sub-folders:

1. wp-admin – Contains authoritative files related to who can admission your WordPress console and what permissions they are granted.
2. wp-includes – Contains files related to rules, hierarchies, and settings of your WordPress site.
3. wp-content – Contains your website'due south themes and plugins files and media uploads (in wp content / uploads).

Today we will focus on the wp-content folder and learn more near its part on your website. The wp-content folder has many more sub-folders and files which we'll discuss in the next department.

What Does The Wp-content Comprise?

The wp-content folder on a standard WordPress site has three more than subfolders – plugins, themes, and uploads.

However, as WordPress sites expand and add more than plugins and themes, more folders may exist created. To simplify this, we've cleaved down the directory structure of this section into four parts:

1. Plugins Folder
2. Themes Folder
3. Uploads Folder
4. Other Common Folders In Wp-content
   • mu-plugins
   • Languages
   • Upgrade
   • Specific Plugins

i. Plugins Folder

On your WordPress website, you lot have the ability to install plugins. All the plugins you install on your WordPress site (both active and inactive) are stored in this folder. If you lot open any of the folders, you lot'd find rules and configuration files of the plugins installed. Tampering with this folder could crusade the plugins to misbehave.

Knowing how to access this folder can come in handy if you are unable to install a plugin on your dashboard (admin panel). You tin can re-create the plugin'due south zip file and paste it into this folder. Side by side, you lot have to excerpt the zip file to activate the plugin on your site.

Similarly, yous can use the folder to delete or disable a plugin. Sometimes, a plugin might be causing a compatibility issue which causes the website to malfunction. If you are unable to disable the plugin from the dashboard, you can admission this folder and disable it manually.

We practise non recommend using this manual method as making changes direct to this WordPress binder is very risky. A slight misstep can render your site cleaved. Utilise this method merely when y'all have no other pick.

2. Themes Binder

Similar to the plugins folder, this ane houses all the themes on your site. Y'all tin use it the aforementioned way you lot would use the plugins folder.

When you install a theme on your WordPress dashboard, it would appear in this folder.

For instance, we installed the Astra theme on our site:

Next, we checked the themes folder and a sub-binder named 'astra' was automatically created:

You can also copy themes into this folder to make information technology available on your dashboard. In the same way, you can too delete themes hither.

3. Uploads Folder

Equally the name suggests, everything that is uploaded to your site is stored in this folder. This includes images, videos, and whatever other files such equally PDF documents, MS Word docs, and GIFs.

By default, these media files are stored in subfolders according to the year and month they were added to the site. You lot can think of it every bit a media library.

This is the default setup of a wp-content folder of a WordPress site. However, as WordPress sites expand and develop, y'all tin often detect additional folders here. We take briefly entailed them below:

4. Other Mutual Folders Inside Wp-content

There are four additional folders that are oftentimes created in the wp-content folder.

a) mu-plugins

mu-plugins are must-use plugins. These plugins are critical to the functioning of your WordPress site and are deemed equally must use. For example, a plugin may come up bundled with a theme. If you disable the plugin, it could break the theme and therefore, interruption your website. So developers tag them every bit mu-plugins and then that you don't disable them unintentionally. If such plugins exist on your site, they are stored in this folder.

b) Languages

WordPress tin be used to create websites in many different languages. If y'all choose to use whatever language other than English or multiple languages, WordPress volition salvage the language files in this folder.

c) Upgrade

This is a temporary folder created by WordPress when you update your site to a new version.

d) Specific Plugins

Sometimes plugins create their own directories on your website. This means they create their own folders inside the wp-content folder. For example, the WP Super Cache plugin creates its own binder chosen 'cache.'

You lot can see that the wp-content repository contains vital data on your website. Therefore, information technology should always be protected.

In the next section, we hash out the measures you can take to safeguard this folder from beingness tampered with or deleted by anyone.

How To Protect WP-content Or The Uploads Folder?

In that location are three measures y'all demand to take to protect your wp-content and uploads folder:

1. Accept a backup of these folders
2. Alter the name of your wp-content folder
3. Cake the folder from showing on your website'south index

1. Backup Your WP-Content Repository

A backup is a copy of your website that tin exist used to restore your site to normal if annihilation were to become wrong with it like if you lot accidentally delete any file or hackers tamper with the folder.

You can take a backup using the BlogVault fill-in plugin. It's easy to install and information technology will automatically have a consummate fill-in of your WordPress site in under a few minutes. We recommend BlogVault considering it'due south guaranteed to work when you restore it.

Yous can also use the plugin to selectively restore your wp-content.

ii. Change The Name Of Your Wp-content

As nosotros know, by default, the folder that stores your content, themes, and plugins are named wp-content. This name is mutual beyond all WordPress sites which makes it piece of cake for anyone to identify and locate the binder. This ways if hackers find a way to break into your site they will be able to find this folder easily because they know it is named 'wp-content'. You can protect this folder by changing its name.

In that location are 2 ways to do this – using a plugin or manually.

A. Using a Plugin (Condom)

We recommend doing this past using a plugin called WP Hide & Security Enhancer. It provides you with a simple way of hiding not just your wp-content, but other important WordPress files as well.

This plugin is great considering it explains the procedure every pace of the way. Information technology'due south easy for both beginners and pros to employ. In addition to wp-content, you can also implement other protective measures on your site such as protecting your comments, authors, uploads, and more than!

B. Manually (Not Recommended)

To rename your wp-content file manually, you lot demand to access the folder on your web server and make changes to it. Nosotros strongly do not recommend using this method as the slightest mistake could break your site.

Step 1: Admission your spider web hosting business relationship. Go to cPanel, and access your website's File Manager.

Pace 2: Navigate to the wp-content binder, correct-click on it, and select 'Rename'.

Step 3: Rename the folder to whatsoever other name. Ensure it is unique and not a name that is already in use on your site.

3. Hibernate The WP-Contents Binder

There are times hackers asking for your wp-content repository using malicious code with a URL in it. This folder'south URL path is usually yourdomain.com/wp-content or yourdomain.com/public_html/wp-content.

This URL path isn't used in the address bar of your browser. Rather, it is used in the coding of your site. Hackers write malicious code to fetch the data of this folder or to inject their own malicious code.

You lot can cake outsiders from accessing this URL path. Only users who are logged into your common WordPress dashboard will have admission to it. To do this, you tin use the same plugin we mentioned above or yous can do it manually.

A. Using a Plugin (Safe)

Using WP Hide & Security Enhancer, yous can block the wp-content URL path with two clicks.

Simply navigate to the option 'Block wp-content URL' and select yeah. Once you salve changes, the plugin will block your wp-content URL path.

B. Manually (Not Recommended)

This method requires adding lawmaking into a file chosen the .htaccess file. Modifying your WordPress files manually is very risky. A pocket-sized error can crusade your site to malfunction or even crash. That said if you yet want to go ahead and give it a endeavour, here are the steps:

Pace 1: Access your web hosting account. Get to cPanel, and access your website's File Director.

Step ii: Navigate to the wp-content folder and create a new file and name it .htacess file.

Step 3: Right-click this file and choose 'Edit'. Paste the post-obit lawmaking and save changes.

Order Allow, Deny

Deny from all

Permit from all

In case you lot cannot see your .htaccess file afterwards creating it, become to Settings and select 'Testify Subconscious Files' .

Pace 4: Your wp-contents folder will be subconscious. If yous try to access your file using https://www.yourdomain.com/wp-contents, you should run into an mistake bulletin:

With that, we come up to an cease on discussing the wp-content and uploads folder on your WordPress site. We are confident that you will at present be fully aware of what this binder does, where to find information technology, and how to protect information technology now.

Concluding Thoughts

The wp-content folder is an integral office of your WordPress site. This makes it so of import to take WordPress security measures to ensure it is protected and backed up.

Apart from the wp-content, there are other integral files and folders that need to exist safeguarded. We recommend protecting not just one or ii elements on your site, only your entire site.

To do this, we recommend installing the MalCare Security Plugin. It will scan your site regularly for malware and alert y'all if in that location'south annihilation suspicious on your site. Y'all can also take a consummate backup of your site regularly and store it in a safe offsite location.

Protect Your WordPress Site With MalCare !

Melinda is a WordPress enthusiast, and enjoys sharing their feel with fellow enthusiasts. On the MalCare blog, Melinda distils the wisdom gained from building plugins to solve security issues that admins face.

arboursomew1946.blogspot.com

Source: https://www.malcare.com/blog/wp-content-uploads/

Share this post