Locking Down wp-content/uploads: Closing WordPress’s Classic Backdoor
The uploads folder is writable by design, which makes it the favorite hiding spot for PHP shells. Here's how to make the whole tree inert to code execution without touching your media.
