BPS Pro: The Pre-Installation Wizard will check your WordPress Filesystem API Method. If the Filesystem API Method is “direct” then you do NOT need to make any changes and you can run the Setup Wizard. If you have run the Pre-Installation Wizard and see this message displayed: “Your Server type is DSO and the WP Filesystem API Method is NOT “direct” go to the “Checking the PHP File Owner ID & PHP Script Owner ID” help section below.
BPS Free: Check the BPS System Info page and if the WP Filesystem API method is “direct”: WP Filesystem API Method: direct then you do NOT need to make any changes to your website in order for BPS to work correctly.
Note: A new table (bottom right) was added to BPS System Info that statically checks and displays folder/file permissions and Script Owner User ID (UID)|File Owner User ID.
Note: If you have the BPS free plugin installed and did not need to make any changes on your website for BPS free to work then you will not need to make any changes for BPS Pro to work.
Note: We made a valiant effort at incorporating the WordPress Filesystem API into BPS and BPS Pro to automate DSO Server setups. Unfortunately, due to the complex functions in BPS Pro and excessive complications and significant negative impact to functionality the BPS / BPS Pro DSO Automation project has been abandoned.
Important Note: It is not required that you change the WordPress Filesystem API Method to “direct” for BPS installation. If you have a DSO server type and understand how to manually change Ownership and Permissions of folders and files on a DSO server type then you can do all of the additional manual steps that DSO server types require instead of allowing WordPress to handle everything automatically by using the “direct” WordPress Filesystem API Method. It is recommended that you change the WordPress Filesystem API Method to “direct”, which will allow WordPress to automatically handle everything for WordPress itself, all plugins and all theme upgrades and installations. For more information about the WordPress Filesystem API see this WordPress Codex page: https://codex.wordpress.org/Editing_wp-config.php#Override_of_default_file_permissions
Checking the PHP File Owner ID & PHP Script Owner ID
Go to the BPS/BPS Pro System Info page and check the Script Owner ID and the File Owner ID for your website. If you see that the WP Filesystem API Method is “ftpext” and the Script Owner ID and File Owner ID are the same (1008) and match as shown below in the example then do the steps under the “Optimum Choice ~ The Script Owner ID & the File Owner ID Match” help section below. If you see that the WP Filesystem API Method is “ftpext” and the Script Owner ID and File Owner ID are NOT the same and DO NOT match then do the steps under the “Optimum Choice ~ The Script Owner ID & the File Owner ID DO NOT Match” help section.
WP Filesystem API Method: ftpext
Script Owner ID: 1008
File Owner ID: 1008
Script Owner Name: UserX
Optimum Choice ~ The Script Owner ID & the File Owner ID Match
1. Download a copy of your wp-config.php file from your website.
2. Edit your downloaded wp-config.php file and add this code below in your wp-config.php file. Add this code directly above “That’s all, stop editing! Happy blogging” in your wp-config.php file.
define( 'FS_METHOD', 'direct' );
define( 'FS_CHMOD_DIR', ( 0755 & ~ umask() ) );
define( 'FS_CHMOD_FILE', ( 0644 & ~ umask() ) );
3. Upload your edited wp-config.php file back to your website root folder and overwrite the existing wp-config.php file.
4. Go to the BPS System Info page and check that WP Filesystem API Method is now “direct” instead of “ftpext”. Note: When the WP Filesystem API Method is “direct” then the Script Owner ID and File Owner ID fields will no longer be displayed on the System Info page. A new table (bottom right) was added to BPS System Info that statically checks and displays folder/file permissions and Script Owner User ID (UID)|File Owner User ID.
5. Go to the BPS Pro Setup Wizard and run the Pre-Installation Wizard and Setup Wizard.
Optimum Choice ~ The Script Owner ID & the File Owner ID DO NOT Match
The optimum choice is of course to use CHOWN to change Ownership so that the PHP Script Owner and the PHP File Owner are the same for your DSO website. This would allow WordPress to use the “direct” Filesystem API Method and everything would just work without having to do anything else. If you use CHOWN so that the Script Owner and the File Owner match/are the same and WP Filesystem API Method is still not shown as “direct” then go to “Optimum Choice ~ The Script Owner ID & the File Owner ID Match” help section above and do the steps to change the WP Filesystem API Method to “direct”.
Note: These are general examples below since there are too many different Server types and possibilities to try and list all the possible steps or all CHOWN methods for every Server type and scenario. These CHOWN steps may be too complicated for the average person to do so try asking your Host to assist you in doing the CHOWN to get the Script Owner and File Owner to match for your website/Server.
General Example:
chown -R [owner]:[group] /path/to/wordpress-installation-folder
-R means make the Ownership changes recursive (apply to all folders and files).
If your WordPress site is located here /var/www/wordpress-installation-folder and your user account name is gandalf and group ownership is apache then the chown command would be this:
chown -R gandalf:apache /var/www/wordpress-installation-folder
Ubuntu example:
cd (change directory) to your WordPress root directory or the Ubuntu default root web directory, which is www.
cd /var/www/
Give ownership of the directory to the apache user, replacing the “username” with the name of your server user.
sudo chown www-data:www-data * -R
sudo usermod -a -G www-data username
WinSCP is a free utility/app that allows you to use SSH to change Ownership remotely
http://winscp.net/eng/docs/ui_customcommand
http://winscp.net/eng/docs/custom_commands#ownership
chown "!?New owner:?!" !&
If for some reason you cannot use the Optimum Choices above then you can use these Manual DSO Server Setup steps by using file permissions – This manual file permission method is NOT recommended and should ONLY be used if nothing else works:
BPS Pro setup steps: Do steps 2 through 8 and if the Setup Wizard displays red error messages then step 1 will have to be done or your particular DSO Server configuration cannot be automated and BPS will not work with your server configuration.
BPS free setup steps: Do steps 3, 4, 5 and 7. If you are able to activate BulletProof Modes then step 1 does not need to be done. If you are unable to activate BulletProof Modes then step 1 will need to be done.
1. Edit your wp-config.php file and add this code. Add your actual FTP username, FTP password, etc in the WordPress Constants values. Add this code directly after define(‘WP_DEBUG’, false); in your wp-config.php file.
define('FS_METHOD', 'ftpext');
define('FTP_BASE', '/path/to/wordpress/');
define('FTP_CONTENT_DIR', '/path/to/wordpress/wp-content/');
define('FTP_PLUGIN_DIR ', '/path/to/wordpress/wp-content/plugins/');
//define('FTP_PUBKEY', '/home/username/.ssh/id_rsa.pub');
//define('FTP_PRIKEY', '/home/username/.ssh/id_rsa');
define('FTP_USER', 'username');
define('FTP_PASS', 'password');
define('FTP_HOST', 'ftp.example.org');
define('FTP_SSL', false);
2. Add the BPS Pro ini_set Options code directly after this code above and after “…Happy blogging…” in your wp-config.php file and add your actual php error log path to the ini_set error_log code below.
/* That's all, stop editing! Happy blogging. */
/** BEGIN BPS Pro ini_set Settings **/
@error_reporting(E_ALL|E_STRICT);
@ini_set('log_errors','On');
@ini_set('error_log','/xxxxx/public_html/wp-content/bps-backup/logs/bps_php_error.log'); // add your actual path here
@ini_set('log_errors_max_len','1024');
@ini_set('memory_limit','128M');
@ini_set('ignore_repeated_errors','On');
@ini_set('ignore_repeated_source','Off');
@ini_set('allow_url_include','Off');
@ini_set('define_syslog_variables','Off');
@ini_set('display_errors','Off');
@ini_set('display_startup_errors','Off');
@ini_set('implicit_flush','Off');
@ini_set('magic_quotes_runtime','Off');
@ini_set('max_execution_time','30');
@ini_set('mysql.connect_timeout','30');
@ini_set('mysql.trace_mode','Off');
@ini_set('report_memleaks','On');
/** END BPS Pro ini_set Settings **/
3. FTP to your website and change the /wp-content/plugins/bulletproof-security folder permissions to 777. Be sure to apply permissions recursively. You will see some sort of checkbox for this in the FTP application that you are using. I recommend WinSCP or FileZilla.
4. Unzip the bulletproof-security.zip file on your computer and upload the /bulletproof-security/admin/htaccess/secure.htaccess file to your website root folder and rename the secure.htaccess file to .htaccess. Using FTP change the file permissions of the .htaccess file to 666.
5. Upload the /bulletproof-security/admin/htaccess/wpadmin-secure.htaccess file to your website /wp-admin folder and rename the wpadmin-secure.htaccess file to .htaccess. Using FTP change the file permissions of the .htaccess file to 666.
6. Upload the /bulletproof-security/admin/htaccess/plugins.htaccess file to your website /wp-content/plugins folder and rename the plugins.htaccess file to .htaccess. Using FTP change the file permissions of the .htaccess file to 666.
7. Using FTP manually create these folders: /wp-content/bps-backup/ and /wp-content/bps-backup/master-backups/. Set the permissions of these 2 folders to 777 folder permissions.
8. You can now log into your WordPress site and run the Pre-installation Wizard and the Setup Wizard to complete the BPS Pro setup.
Troubleshooting
A check has been added to the BPS System Info page that will display the WP Filesystem API Method in use and if the Method is not “direct” then additional checks will be displayed to aid in troubleshooting and to also confirm successful switch/change to the WP Filesystem “direct” Method:
WP Filesystem API Method: ftpext
Script Owner ID: 999
File Owner ID: 888
Script Owner Name: gandalf
If the WordPress Filesystem API Method is “direct” then only display the WP Filesystem API Method:
WP Filesystem API Method: direct
A new table (bottom right) was added to BPS System Info that statically checks and displays folder/file permissions and Script Owner User ID (UID)|File Owner User ID.
.
