How Do I Upload a Folder to Wordpress?

Are you curious nearly where the content of your website is stored? Or take you heard of wp-content on your WordPress site and want to learn more well-nigh it?

A WordPress website is made up of many files and folders. wp-content is one of the key folders as it contains your website's content, and the themes and plugins installed on your site. If this folder is accidentally deleted, your website will crash.

At MalCare, nosotros've seen many cases where WordPress websites crashed because a hacker has meddled with the wp-content. Since many website owners never visit the backend of WordPress and check the wp-content, it makes it an ideal spot for hackers to inject malware. They too hide backdoors that requite them a hole-and-corner entry bespeak into your site.

Learning about what hackers tin practise the wp-content repository can be alarming. But don't worry!

In this guide, we've simplified everything you demand to know about the wp-content. You lot'll find out what the folder does and how to employ it. Next, you'll learn how to hide it or prevent it from being accessed by unauthorized users.

TL;DR: The wp-content  is an integral part of your WordPress site. To ensure it is protected, we recommend installing a WordPress Security Plugin (MalCare). The plugin will browse and protect your WordPress files and folders from hackers. It will as well automatically take backups of your site regularly and store them safely.

What Is The WP-content Folder?

As we mentioned in the introduction, a WordPress website is made of many files and directories. It is created by default at the fourth dimension of building your website and is one of the well-nigh crucial folders of your website.

Every image that y'all upload, every theme and plugin that you install on your website is stored in this folder (more details in the next department). In other words, whatever files that don't get stored in the database are stored here. If the binder gets deleted, your website will crash and yous will need to rebuild it from scratch.

Mostly, website owners don't use this folder. Simply certain occasions may arise when you need to access it.

For instance, we have installed a plugin on our WordPress website. Just the plugin caused the site to malfunction as it was not compatible with the version of WordPress we were running. We couldn't disable it on the WordPress dashboard. So we had to go to the wp-content binder to delete the plugin in society to admission our site.

Recommend read: Beginner's Guide to Understanding WordPress File Structure & Database

How To Access The WP-Content Binder

To access the wp-content folder, you need to access the WordPress root directory. Hither'due south what to do:

1. Log into your spider web hosting account (e.g. WP Engine).

2. Access cPanel and open File Manager.

3. Hither, yous will see a folder named 'public_html'. This folder resides on your spider web server and is made up of WordPress files and sub-folders that all contribute to the operation and advent of your website.

4. Inside the public_html folder, you will detect 3 chief sub-folders:

1. wp-admin – Contains administrative files related to who can admission your WordPress console and what permissions they are granted.
2. wp-includes – Contains files related to rules, hierarchies, and settings of your WordPress site.
3. wp-content – Contains your website's themes and plugins files and media uploads (in wp content / uploads).

Today we will focus on the wp-content folder and learn more than near its role on your website. The wp-content folder has many more sub-folders and files which we'll discuss in the next section.

What Does The Wp-content Contain?

The wp-content folder on a standard WordPress site has three more subfolders – plugins, themes, and uploads.

Nonetheless, equally WordPress sites expand and add more plugins and themes, more folders may be created. To simplify this, nosotros've cleaved downwards the directory construction of this section into four parts:

1. Plugins Folder
2. Themes Binder
3. Uploads Binder
4. Other Common Folders In Wp-content
   • mu-plugins
   • Languages
   • Upgrade
   • Specific Plugins

1. Plugins Folder

On your WordPress website, you take the ability to install plugins. All the plugins you install on your WordPress site (both agile and inactive) are stored in this folder. If you open any of the folders, y'all'd find rules and configuration files of the plugins installed. Tampering with this binder could cause the plugins to misbehave.

Knowing how to admission this folder can come in handy if you lot are unable to install a plugin on your dashboard (admin panel). You can copy the plugin's zero file and paste it into this binder. Side by side, you take to extract the nothing file to activate the plugin on your site.

Similarly, you can use the folder to delete or disable a plugin. Sometimes, a plugin might be causing a compatibility issue which causes the website to malfunction. If you are unable to disable the plugin from the dashboard, you can admission this folder and disable it manually.

We do not recommend using this manual method every bit making changes directly to this WordPress folder is very risky. A slight misstep tin can render your site broken. Use this method only when you have no other pick.

two. Themes Folder

Similar to the plugins folder, this 1 houses all the themes on your site. You tin apply it the same way you would use the plugins folder.

When y'all install a theme on your WordPress dashboard, it would appear in this folder.

For instance, we installed the Astra theme on our site:

Next, we checked the themes folder and a sub-folder named 'astra' was automatically created:

Yous can too re-create themes into this folder to arrive available on your dashboard. In the aforementioned way, yous tin as well delete themes hither.

3. Uploads Folder

As the name suggests, everything that is uploaded to your site is stored in this folder. This includes images, videos, and any other files such equally PDF documents, MS Word docs, and GIFs.

By default, these media files are stored in subfolders co-ordinate to the yr and month they were added to the site. Yous tin recall of it as a media library.

This is the default setup of a wp-content binder of a WordPress site. However, equally WordPress sites aggrandize and develop, y'all can oftentimes find boosted folders here. Nosotros have briefly entailed them beneath:

iv. Other Common Folders Inside Wp-content

In that location are iv additional folders that are ofttimes created in the wp-content folder.

a) mu-plugins

mu-plugins are must-utilize plugins. These plugins are disquisitional to the performance of your WordPress site and are accounted as must apply. For example, a plugin may come bundled with a theme. If you disable the plugin, it could interruption the theme and therefore, pause your website. So developers tag them every bit mu-plugins and so that you don't disable them unintentionally. If such plugins exist on your site, they are stored in this folder.

b) Languages

WordPress tin can be used to create websites in many different languages. If you choose to use whatsoever language other than English or multiple languages, WordPress will save the language files in this folder.

c) Upgrade

This is a temporary folder created by WordPress when you update your site to a new version.

d) Specific Plugins

Sometimes plugins create their ain directories on your website. This means they create their ain folders within the wp-content folder. For instance, the WP Super Enshroud plugin creates its own folder called 'enshroud.'

Yous can see that the wp-content repository contains vital data on your website. Therefore, it should always be protected.

In the next section, we discuss the measures you tin can take to safeguard this folder from being tampered with or deleted by anyone.

How To Protect WP-content Or The Uploads Binder?

At that place are iii measures you demand to take to protect your wp-content and uploads binder:

1. Take a backup of these folders
2. Modify the proper name of your wp-content folder
3. Block the folder from showing on your website's index

i. Fill-in Your WP-Content Repository

A backup is a copy of your website that tin be used to restore your site to normal if annihilation were to go wrong with it like if yous accidentally delete whatever file or hackers tamper with the folder.

Yous tin take a fill-in using the BlogVault backup plugin. Information technology's piece of cake to install and it will automatically take a consummate backup of your WordPress site in under a few minutes. Nosotros recommend BlogVault because information technology's guaranteed to work when you restore information technology.

You can as well utilize the plugin to selectively restore your wp-content.

2. Change The Name Of Your Wp-content

As we know, past default, the folder that stores your content, themes, and plugins are named wp-content. This proper name is common across all WordPress sites which makes it easy for anyone to identify and locate the folder. This means if hackers find a way to intermission into your site they volition be able to find this binder easily considering they know it is named 'wp-content'. You can protect this folder by irresolute its proper noun.

There are 2 ways to do this – using a plugin or manually.

A. Using a Plugin (Prophylactic)

We recommend doing this by using a plugin chosen WP Hide & Security Enhancer. It provides you lot with a simple manner of hiding not just your wp-content, merely other important WordPress files every bit well.

This plugin is slap-up because it explains the procedure every stride of the fashion. It'south easy for both beginners and pros to use. In improver to wp-content, you can too implement other protective measures on your site such as protecting your comments, authors, uploads, and more than!

B. Manually (Not Recommended)

To rename your wp-content file manually, you need to admission the folder on your web server and make changes to it. We strongly do not recommend using this method as the slightest mistake could suspension your site.

Pace 1: Access your spider web hosting account. Go to cPanel, and access your website's File Manager.

Footstep 2: Navigate to the wp-content folder, right-click on it, and select 'Rename'.

Footstep three: Rename the folder to whatsoever other name. Ensure information technology is unique and non a name that is already in utilise on your site.

3. Hide The WP-Contents Folder

At that place are times hackers asking for your wp-content repository using malicious lawmaking with a URL in it. This binder's URL path is usually yourdomain.com/wp-content or yourdomain.com/public_html/wp-content.

This URL path isn't used in the accost bar of your browser. Rather, it is used in the coding of your site. Hackers write malicious code to fetch the data of this folder or to inject their own malicious code.

You can cake outsiders from accessing this URL path. But users who are logged into your mutual WordPress dashboard volition accept access to it. To exercise this, you can use the same plugin we mentioned above or you lot tin can do it manually.

A. Using a Plugin (Rubber)

Using WP Hide & Security Enhancer, you tin block the wp-content URL path with two clicks.

Simply navigate to the choice 'Cake wp-content URL' and select yes. In one case yous relieve changes, the plugin will cake your wp-content URL path.

B. Manually (Not Recommended)

This method requires calculation lawmaking into a file called the .htaccess file. Modifying your WordPress files manually is very risky. A small error can crusade your site to malfunction or even crash. That said if y'all still want to go ahead and give it a try, hither are the steps:

Step 1: Access your web hosting account. Get to cPanel, and access your website's File Manager.

Step ii: Navigate to the wp-content folder and create a new file and name it .htacess file.

Step iii: Correct-click this file and cull 'Edit'. Paste the post-obit code and save changes.

Order Allow, Deny

Deny from all

Allow from all

In case you cannot meet your .htaccess file afterward creating it, go to Settings and select 'Show Hidden Files' .

Step 4: Your wp-contents folder volition be subconscious. If you try to access your file using https://www.yourdomain.com/wp-contents, you lot should see an error bulletin:

With that, we come to an terminate on discussing the wp-content and uploads binder on your WordPress site. We are confident that yous will now be fully aware of what this folder does, where to find it, and how to protect information technology now.

Final Thoughts

The wp-content folder is an integral role of your WordPress site. This makes information technology and so important to take WordPress security measures to ensure information technology is protected and backed upwardly.

Apart from the wp-content, there are other integral files and folders that demand to be safeguarded. We recommend protecting not just one or two elements on your site, but your entire site.

To practise this, we recommend installing the MalCare Security Plugin. Information technology will scan your site regularly for malware and warning yous if there'due south annihilation suspicious on your site. Yous can besides accept a consummate backup of your site regularly and store it in a safe offsite location.

Protect Your WordPress Site With MalCare !

Melinda is a WordPress enthusiast, and enjoys sharing their experience with fellow enthusiasts. On the MalCare blog, Melinda distils the wisdom gained from building plugins to solve security issues that admins confront.

leachherg1974.blogspot.com

Source: https://www.malcare.com/blog/wp-content-uploads/

Share this post