{"id":49746,"date":"2022-03-29T10:24:01","date_gmt":"2022-03-29T10:24:01","guid":{"rendered":"\/tutorials\/?p=49746"},"modified":"2026-03-10T10:06:26","modified_gmt":"2026-03-10T10:06:26","slug":"wordpress-content-uploads","status":"publish","type":"post","link":"\/my\/tutorials\/wordpress-content-uploads","title":{"rendered":"Wp-content uploads: what it is and how to upload files in WordPress"},"content":{"rendered":"<?xml encoding=\"utf-8\" ?><p>The <strong>WP-Content<\/strong> directory plays a significant role in all WordPress sites. It houses your website&rsquo;s content, including file and media uploads as well as the assets of all the plugins and themes installed on your WordPress site. If you delete this directory, your website will crash.<\/p><p>Due to its importance, this folder is a popular target of hackers. To minimize security risks, website owners should know how to access, manage, and protect their <strong>WP-Content<\/strong> directory properly.<\/p><p>This article will cover the steps to access and upload the <strong>WP-Content <\/strong>directory. We will also teach you how to hide the <strong>WP-Content\/Uploads<\/strong> folder from the public, preventing hackers from attempting backdoor attacks on your WordPress site. <\/p><p><div class=\"protip\">\n                    <h2 class=\"featured-snippet title\">What Is the WP-Content Folder?<\/h2>\n                    <p>The wp-content\/uploads folder is a default directory in WordPress, used to store images and media files uploaded to your posts and pages. <\/p>\n                <\/div>\n\n\n\n<\/p><h2 class=\"wp-block-heading\" id=\"h-how-to-access-the-wp-content-folder\">How to Access the WP-Content Folder<\/h2><p>You can access the <a href=\"\/my\/tutorials\/what-is-wordpress\">WordPress<\/a> <strong>WP-Content<\/strong> directory using your hosting provider&rsquo;s <strong>File Manager<\/strong>. The following tutorial explains how to do it via Hostinger <a href=\"\/support\/1583483-comprehensive-guide-to-hpanel-at-hostinger\/\">hPanel<\/a>:<\/p><ol class=\"wp-block-list\">\n<li>Log in to your web hosting account and navigate to <strong>Hosting &rarr;<\/strong> <strong>Manage<\/strong>.<\/li>\n\n\n\n<li>Upon entering the <strong>Hosting Account<\/strong> page, scroll down to the <strong>Files <\/strong>section and select <strong>File Manager<\/strong>.<\/li>\n\n\n\n<li>Double-click your root directory (<strong>public_html<\/strong>) and locate the <strong>WP-Content<\/strong> directory within.<\/li>\n<\/ol><?xml encoding=\"utf-8\" ?><figure class=\"wp-block-image size-large\"><a href=\"\/my\/wordpress-hosting\" target=\"_blank\" rel=\"noreferrer noopener\"><img decoding=\"async\" width=\"1024\" height=\"300\" src=\"https:\/\/www.hostinger.com\/tutorials\/wp-content\/uploads\/sites\/2\/2024\/06\/New-WP_in-text-banner-1024x300.png\" alt=\"\" class=\"wp-image-111781\" srcset=\"https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2024\/06\/New-WP_in-text-banner-1024x300.png 1024w, https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2024\/06\/New-WP_in-text-banner-300x88.png 300w, https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2024\/06\/New-WP_in-text-banner-150x44.png 150w, https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2024\/06\/New-WP_in-text-banner-768x225.png 768w, https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2024\/06\/New-WP_in-text-banner-1536x450.png 1536w, https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2024\/06\/New-WP_in-text-banner.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure><h2 class=\"wp-block-heading\" id=\"h-how-to-upload-the-wp-content-folder\">How to Upload the WP-Content Folder<\/h2><p>When <a href=\"\/my\/tutorials\/website\/how-to-upload-your-website\">uploading your site<\/a> to a different web server, you need to upload the WP-Content folder to the new WordPress installation via <strong>File Manager<\/strong> or <strong>SFTP<\/strong>. This time, we&rsquo;ll explain the steps how to do it using the latter method:<\/p><ol class=\"wp-block-list\">\n<li>Establish an <a href=\"\/my\/tutorials\/ftp\/filezilla-ftp-configuration\">FTP connection<\/a> using an FTP client.<\/li>\n\n\n\n<li>The left panel will display your local computer files, while the right panel will showcase your remote WordPress website directories. Make sure the right panel has your root directory open (<strong>public_html<\/strong>).<\/li>\n\n\n\n<li>Drag-and-drop the <strong>WP-Content<\/strong> folder from the left panel to the right panel. A pop-up warning will appear asking for confirmation to overwrite or merge the existing WordPress files. If it&rsquo;s a fresh WordPress installation, you can choose to overwrite them &ndash; click <strong>OK<\/strong>.<\/li>\n<\/ol><p><div class=\"protip\">\n                    <h4 class=\"title\">Pro Tip<\/h4>\n                    <p>This method also works for uploading media files to your WordPress Media Library. If you don&rsquo;t have access to the admin dashboard, you can use an FTP client to access the WP-Content\/Uploads directory and add files there for later use.<\/p>\n                <\/div>\n\n\n\n<\/p><h2 class=\"wp-block-heading\" id=\"h-how-to-hide-the-wp-content-folder\">How to Hide the WP-Content Folder<\/h2><p>Your <strong>WP-Content<\/strong> repository is an ideal entry point for hackers to access your website&rsquo;s sensitive information or inject malicious code into it. To reduce the risk of cyberattacks, we recommend hiding its URL path.<\/p><p>There are two ways to hide the <strong>WP-Content<\/strong> folder &#8210; using a <strong>WordPress plugin <\/strong>or <strong>manually<\/strong>.<\/p><p>Many <a href=\"\/my\/tutorials\/wordpress-security-plugins\">WordPress security plugins<\/a> have a feature that secures website directories. The following are the steps to secure your <strong>WP-Content<\/strong> folder using the <a href=\"https:\/\/wordpress.org\/plugins\/wp-security-hardening\/\" target=\"_blank\" rel=\"noopener\">WP Hardening<\/a> plugin:<\/p><ol class=\"wp-block-list\">\n<li><a href=\"\/my\/tutorials\/wordpress\/how-to-install-wordpress-plugins\">Install and activate the plugin<\/a>.<\/li>\n\n\n\n<li>Navigate to <strong>WP Hardening<\/strong> <strong>&rarr;<\/strong> <strong>Security Fixers<\/strong> from your WordPress dashboard.<\/li>\n\n\n\n<li>Expand the <strong>Server Hardening<\/strong> section and toggle the option next to <strong>Hide directory listing of WP includes<\/strong>. Doing so will hide your directories&rsquo; URL path, preventing third parties from discovering your directory structure and browsing your site&rsquo;s content.<\/li>\n<\/ol><div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><a href=\"https:\/\/www.hostinger.com\/tutorials\/wp-content\/uploads\/sites\/2\/2024\/01\/wp-hardening.png\"><img decoding=\"async\" src=\"\/tutorials\/wp-content\/uploads\/sites\/2\/2024\/01\/wp-hardening-1024x218.png\" alt=\"The Hide Directory Listing of WP includes the option to hide WordPress directories' URL path.\"><\/a><\/figure><\/div><p>The manual method requires adding code to the <strong>.htaccess<\/strong> file. Here&rsquo;s how to block access to the <strong>WP-Content<\/strong>\/<strong>Uploads <\/strong>folder and disable PHP execution in it:<\/p><ol class=\"wp-block-list\">\n<li>Navigate to your <strong>WP-Content<\/strong>\/<strong>Uploads <\/strong>directory from the root directory using <strong>File Manager<\/strong>.<\/li>\n\n\n\n<li>Locate the <a href=\"\/my\/tutorials\/locate-and-create-htaccess\">.htaccess file<\/a> (or create a new file in the <strong>.htaccess<\/strong> format if there&rsquo;s none present) and add the following code:<\/li>\n<\/ol><div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\">\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\"># Kill PHP Execution\n&lt;Files ~ \".ph(?:p[345]?|t|tml)$\"&gt;\ndeny from all\n&lt;\/Files&gt;\nOrder Allow, Deny \nDeny from all \nAllow from all<\/pre>\n<\/div><\/div>\n<\/div><\/div><ol start=\"3\" class=\"wp-block-list\">\n<li>Save the changes.<\/li>\n<\/ol><figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.trustpilot.com\/reviews\/642d28a65eb618f8dc77e91d\" target=\"_blank\" rel=\"noreferrer noopener\"><img decoding=\"async\" width=\"1024\" height=\"559\" src=\"https:\/\/www.hostinger.com\/tutorials\/wp-content\/uploads\/sites\/2\/2023\/08\/WP-Fastest--1024x559.png\" alt=\"\" class=\"wp-image-91643\" srcset=\"https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2023\/08\/WP-Fastest-.png 1024w, https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2023\/08\/WP-Fastest--300x164.png 300w, https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2023\/08\/WP-Fastest--150x82.png 150w, https:\/\/www.hostinger.com\/my\/tutorials\/wp-content\/uploads\/sites\/45\/2023\/08\/WP-Fastest--768x419.png 768w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure><p>\n<div class=\"protip\">\n                    <h4 class=\"title\">Other Suggested Reading<\/h4>\n                    <p><a href=\"\/my\/tutorials\/how-to-secure-wordpress\">How to Secure WordPress<\/a><br>\n<a href=\"\/my\/tutorials\/how-to-add-wordpress-related-posts\">How to Add WordPress Related Posts<\/a><br>\n<a href=\"\/my\/tutorials\/wordpress-date-format\">Guide to WordPress Date Formats<\/a><br>\n<a href=\"\/my\/tutorials\/how-to-upload-document-to-website\">How to Upload a Document to a Website Using File Manager and WordPress<\/a><\/p>\n                <\/div>\n\n\n\n<\/p><h2 class=\"wp-block-heading\" id=\"h-conclusion\">Conclusion<\/h2><p>A WordPress site cannot function without a <strong>WP-Content<\/strong> directory. By understanding its role on your website and how it works, you&rsquo;ll be able to maintain its operations and secure the folder from hackers. We hope this article has shed some light on the operation and importance of the <strong>WP-Content<\/strong> directory. Good luck.<\/p><h2 class=\"wp-block-heading\" id=\"h-wp-content-uploads-faqs\">WP-Content Uploads FAQs<\/h2><p>To learn more about wp-content uploads, read the following frequently asked questions.<\/p><div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1680763310303\"><h3 class=\"schema-faq-question\">How Do I Download All WP-Content Files?<\/h3> <p class=\"schema-faq-answer\">To download all wp-content files, connect to your website via FTP or hPanel, navigate to the wp-content folder, select all files and folders within it, and then download them to your local computer using an FTP client or hPanel file manager.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1680763322991\"><h3 class=\"schema-faq-question\">Why Are My WP-Content Uploads Not Showing In WordPress?<\/h3> <p class=\"schema-faq-answer\">If your wp-content uploads are not showing in WordPress, it could be due to incorrect file permissions, a caching issue, a plugin conflict, or a problem with your theme&rsquo;s code. It&rsquo;s recommended to troubleshoot each possibility to determine the root cause and resolve the issue.<\/p> <\/div> <\/div>\n","protected":false},"excerpt":{"rendered":"<p>The WP-Content directory plays a significant role in all WordPress sites. It houses your website&rsquo;s content, including file and media uploads as well as the assets of all the plugins and themes installed on your WordPress site. If you delete this directory, your website will crash. Due to its importance, this folder is a popular [&#8230;]<\/p>\n<p><a class=\"btn btn-secondary understrap-read-more-link\" href=\"\/my\/tutorials\/wordpress-content-uploads\">Read More&#8230;<\/a><\/p>\n","protected":false},"author":115,"featured_media":126926,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"WP-Content Uploads: What It Is and How to Use It","rank_math_description":"WP-content uploads stores your WordPress website content. Learn about why this directory is so important and how to use it.","rank_math_focus_keyword":"WP Content Uploads","footnotes":""},"categories":[22632],"tags":[],"class_list":["post-49746","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress"],"hreflangs":[{"locale":"en-US","link":"https:\/\/www.hostinger.com\/tutorials\/wordpress-content-uploads","default":0},{"locale":"pt-BR","link":"https:\/\/www.hostinger.com\/br\/tutoriais\/wordpress-content-uploads","default":0},{"locale":"id-ID","link":"https:\/\/www.hostinger.com\/id\/tutorial\/cara-upload-wp-content-wordpress","default":0},{"locale":"ja-JP","link":"https:\/\/www.hostinger.com\/jp\/tutorials\/wordpress-content-uploads\/","default":0},{"locale":"en-UK","link":"https:\/\/www.hostinger.com\/uk\/tutorials\/wordpress-content-uploads","default":0},{"locale":"en-MY","link":"https:\/\/www.hostinger.com\/my\/tutorials\/wordpress-content-uploads","default":0},{"locale":"en-PH","link":"https:\/\/www.hostinger.com\/ph\/tutorials\/wordpress-content-uploads","default":0},{"locale":"pt-PT","link":"https:\/\/www.hostinger.com\/pt\/tutoriais\/wordpress-content-uploads","default":0},{"locale":"en-IN","link":"https:\/\/www.hostinger.com\/in\/tutorials\/wordpress-content-uploads","default":0},{"locale":"en-CA","link":"https:\/\/www.hostinger.com\/ca\/tutorials\/wordpress-content-uploads","default":0},{"locale":"en-AU","link":"https:\/\/www.hostinger.com\/au\/tutorials\/wordpress-content-uploads","default":0},{"locale":"en-NG","link":"https:\/\/www.hostinger.com\/ng\/tutorials\/wordpress-content-uploads","default":0}],"_links":{"self":[{"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/posts\/49746","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/comments?post=49746"}],"version-history":[{"count":44,"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/posts\/49746\/revisions"}],"predecessor-version":[{"id":126923,"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/posts\/49746\/revisions\/126923"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/media\/126926"}],"wp:attachment":[{"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/media?parent=49746"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/categories?post=49746"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hostinger.com\/my\/tutorials\/wp-json\/wp\/v2\/tags?post=49746"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}