編輯“WordPress:Htaccess for subdirectories”（章節(jié)）

== 例子 ==

The [http://www.soderlind.no/archives/2006/01/03/imagemanager-20/ ImageManager plugin] provides a sophisticated interface for uploading, editing and managing image files for WordPress. It writes to and reads from a base image directory which can be set up in the plugin's options panel. This directory needs to be world-writeable (chmod 777) in order to work properly. However, any directory whose permissions have been set to '777' present a (real) security hole: a malicious visitor could upload a script to that directory and hack your site. 

[http://www.soderlind.no/archives/2006/01/03/imagemanager-20/ 圖像管理器插件]提供了功能較多的界面，用來(lái)為WordPress上傳，編輯和管理圖像文件。這個(gè)插件在插件的選項(xiàng)面板中設(shè)置的圖像目錄中閱讀和編寫(xiě)基本的圖像。各種語(yǔ)言都可以編寫(xiě)這個(gè)目錄，這樣目錄才能夠正確運(yùn)行（chmod 777）。然而，任何權(quán)限設(shè)置為'777'的目錄，顯示了一個(gè)（真正的）安全漏洞：邪惡的訪客可以向那個(gè)目錄上傳一個(gè)腳本并且攻擊你的站點(diǎn)。