http://codex.wordpress.org/Hardening_WordPress#File_Permissions http://codex.wordpress.org/Hardening_WordPress#File_Permissi... People just don't RTFM. It has

http://codex.wordpress.org/Hardening_WordPress#File_Permissions http://codex.wordpress.org/Hardening_WordPress#File_Permissi... People just don't RTFM. It has been mentioned in Wordpress's hardening information for years and years aoubt having the web server process running as a separate user than the file owners along with the proper permissions.