#!/bin/bash
# Interactive script to check if other users can read WordPress files

echo "🔧 WordPress File Permission Checker"
read -rp "Enter your WordPress path (e.g. /home/ajels/public_html): " WP_PATH

if [ ! -d "$WP_PATH" ]; then
    echo "❌ The path $WP_PATH does not exist. Exiting."
    exit 1
fi

echo
echo "🔍 Checking for world-readable files under $WP_PATH ..."
echo

# Find files that are readable by "others"
find "$WP_PATH" -type f -perm -o+r -exec ls -l {} \; > /tmp/world_readable.txt

if [[ -s /tmp/world_readable.txt ]]; then
    echo "⚠️ These files are world-readable (others can read):"
    cat /tmp/world_readable.txt
else
    echo "✅ No world-readable files found!"
fi

echo
echo "🔍 Checking for world-readable wp-config.php ..."
if [ -f "$WP_PATH/wp-config.php" ]; then
    if [ $(stat -c "%A" "$WP_PATH/wp-config.php" | cut -c8) == "r" ]; then
        echo "⚠️ wp-config.php is world-readable!"
    else
        echo "✅ wp-config.php is NOT world-readable."
    fi
else
    echo "ℹ️ wp-config.php not found in $WP_PATH"
fi

echo
echo "✅ Scan complete."