File Management
Website files are stored in a document root on the hosting server. Depending on the host, you may access them through a browser-based file manager, SFTP or SSH. Prefer encrypted SFTP or SSH access when it is available.
Common WordPress locations
/wp-admin/and/wp-includes/contain WordPress core files./wp-content/themes/contains installed themes./wp-content/plugins/contains installed plugins./wp-content/uploads/usually contains Media Library files organised by date.wp-config.phpcontains important site and database configuration.
Before changing a file
- Confirm that you are working in the correct website directory.
- Create a current backup or download a copy of the file you plan to edit.
- Use a staging site for code changes when one is available.
- Keep the original filename and permissions unless the change specifically requires otherwise.
- Test the public site and WordPress admin after saving.
Share access securely
If a BugShield developer needs hosting or SFTP access, store it in the site’s Password Vault. Do not place credentials inside a support message or fix request.
Common questions
Frequently Asked Questions
Are website files included in the database?
Usually not. The database stores content and settings, while images, themes, plugins and core code are stored as files. A complete backup needs both.
What is the safest way to edit a website file?
Save a copy first, make the change on staging when possible, edit only the intended file and test both the website and admin area afterwards.
Why can I not see hidden files such as .htaccess?
Some file managers and SFTP applications hide filenames beginning with a dot. Enable the option to show hidden files before assuming the file is missing.
Can I edit a WordPress theme directly?
You can, but an update may overwrite changes made to a third-party theme. Customisations are normally safer in a child theme or another update-safe location.