The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →A WordPress site is made of core files, site-owned content, and configuration. The three directories that matter most are wp-admin (the dashboard), wp-content (your themes, plugins, media, and other site data), and wp-includes (shared WordPress core code). At the installation root, wp-config.php controls the database and other settings, while .htaccess can control Apache rewrite rules for permalinks.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
Knowing what each location does lets you find uploads, diagnose a broken plugin, restore a site, and avoid deleting files that WordPress needs. Paths can differ between hosts because configuration constants, document roots, permissions, and server layouts are not universal.
As an Amazon Associate I earn from qualifying purchases.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The basic WordPress directory map
A standard installation has a root directory containing WordPress entry points and configuration files, plus three major directories. Your hosting control panel may call the root public_html, www, htdocs, or something else; the name is host-specific. What matters is that the root is the directory from which that particular site is served.
| Location | Primary role | Typical contents | Can it be replaced? |
|---|---|---|---|
wp-admin |
Administration interface | Dashboard PHP, JavaScript, CSS, and admin-only assets | Generally yes, from a clean WordPress package, provided custom changes are not stored there |
wp-content |
Site-specific material | Themes, plugins, uploads, languages, caches, and plugin-created directories | No blanket replacement; preserve the entire directory before maintenance |
wp-includes |
Shared WordPress core | Core PHP libraries, APIs, JavaScript, and CSS used throughout WordPress | Generally yes, from a matching clean download |
wp-config.php |
Site configuration | Database credentials, security salts, and optional path constants | No; keep the site’s copy and protect it |
.htaccess |
Apache per-directory rules | Rewrite rules and other server directives | Back up before changing; rules depend on the site and server |
| Other root files | Bootstrap and web entry points | index.php, wp-login.php, wp-settings.php, update files, and license/readme files |
Core files can usually be restored from a clean package, but keep a backup first |
Do not assume that every installation has the same visible names or locations. A host can move the document root, hide dotfiles, or use wp-config.php constants to relocate content, plugins, or uploads.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
wp-admin: the dashboard’s code
wp-admin contains the PHP files and front-end assets that render the WordPress administration area. Screens such as Posts, Pages, Media, Users, Settings, and plugin-management pages are powered by code in this directory, working with the rest of WordPress through shared APIs.
What belongs here
- Administration page handlers and dashboard components.
- JavaScript and CSS used by the admin screens.
- Core files that process administrative actions such as updates, menus, and user management.
What does not belong here
Your themes, plugins, and uploaded images do not normally live in wp-admin. A plugin may add an admin screen, but its own files remain in its plugin directory under wp-content. Editing files in wp-admin is therefore an unreliable way to customize the dashboard: updates can replace those edits.
When to restore it
If core administration files are damaged, a clean WordPress download can normally replace them. Match the download to the site’s installed WordPress version and avoid overwriting wp-content or wp-config.php during a core-file repair. Make a complete backup first so you can recover from a mistaken copy or a version mismatch.
wp-content: the part you own
wp-content is where most of a site’s unique, replaceable-by-you material lives. WordPress itself supplies the directory, but its contents are created or changed by administrators, theme authors, plugin authors, and automated services.
The themes directory
wp-content/themes holds installed themes. Each theme normally has its own subdirectory containing templates, stylesheets, scripts, images, and a theme metadata file. The active theme determines much of the site’s presentation, while a child theme can keep customizations separate from a parent theme.
Back up custom themes and child themes even if the original theme can be downloaded again. A clean download will not include edits made for your site. Do not delete the active theme while troubleshooting unless you have confirmed that another usable theme is available.
Recommended Free Tools
The plugins directory
wp-content/plugins contains ordinary plugins, usually one subdirectory per plugin. Plugins can create additional directories elsewhere in wp-content for logs, generated files, licenses, backups, or caches.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Renaming a plugin’s directory is a common emergency technique when the dashboard is inaccessible: WordPress can no longer load the plugin from its expected path. Use this only as a controlled diagnostic, record the original name, and restore it after identifying the problem. A directory rename does not remove database settings or files generated by the plugin.
Must-use plugins
Some installations use wp-content/mu-plugins for must-use plugins. Files there are loaded automatically and are not managed through the ordinary Plugins screen. Because they can enforce hosting or security behavior, include them in backups and inspect them before assuming that disabling every visible plugin disables all custom code.
The uploads directory
Media Library files are stored on the server under the configured uploads location. In a conventional layout, that location is inside wp-content, but the exact path is not universal. The UPLOADS setting can change it, and other constants or hosting arrangements can move the content directory itself.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsUploads commonly include original images plus generated image sizes, documents, audio, video, and files added by other workflows. A Media Library entry in the database is not a substitute for the physical file: restoring only the database can leave broken media links, while restoring only files can leave unattached records.
Other directories created by plugins
Security, caching, backup, ecommerce, and form plugins may create directories directly under wp-content. Names and purposes vary. Treat unfamiliar directories as potentially site-specific until you identify the component that created them. Deleting a cache directory may be safe for that plugin, but deleting a data or upload directory can remove information that cannot be regenerated.
Languages and generated assets
Language packs, compiled styles, JavaScript bundles, cache files, and temporary data may also appear under wp-content. Some generated files can be rebuilt; others contain settings or user data. Check the responsible plugin or host documentation before clearing them, and preserve the directory in a full backup when uncertain.
wp-includes: shared core libraries
wp-includes contains the bulk of WordPress’s shared core code: PHP libraries, JavaScript, CSS, and APIs used by both the public site and the dashboard. It is not the place for themes or plugins.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Why direct edits are a bad idea
Changes inside wp-includes are overwritten by core updates and can create hard-to-diagnose security and compatibility problems. Put custom behavior in a plugin or child theme instead. If a file appears modified unexpectedly, compare it with a clean package and investigate whether malware or an incomplete update is involved.
Replacing damaged core files
WordPress core files are usually replaceable from a fresh download. Replace only the matching core directories and files, not the site-specific content and configuration. Preserve timestamps or a copy of the damaged files if you need forensic evidence or want to compare changes.
wp-config.php: the site’s central configuration
WordPress documentation describes wp-config.php as one of the most important files in an installation. It normally sits in the root directory and defines how WordPress connects to its database, along with other settings that affect security and file locations.
What it can contain
- Database name, user, password, and server information.
- Authentication keys and salts used to harden logged-in sessions.
- Debugging and development constants.
- Custom locations for
wp-content, plugins, and uploads. - The
UPLOADSsetting, when used, which changes where Media Library files are written.
Because these constants can relocate directories, never infer an uploads path solely from the folder names you see. Read the configuration and confirm the web server’s document root before moving files.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Protecting and editing it
A syntax error in wp-config.php can produce a blank page or a server error; incorrect database values can prevent WordPress from connecting at all. Download a copy before editing, change one setting at a time, and use a plain-text editor that does not add formatting. Keep credentials out of screenshots, tickets, and public repositories.
Many servers prevent browsers from serving PHP source directly, but that is not a reason to expose the file unnecessarily. Use the host’s file permissions and access controls, and ask the host how configuration files are protected if you are unsure.
.htaccess: Apache rewrite and access rules
.htaccess is an Apache per-directory configuration file. WordPress uses rewrite rules in it to turn human-readable permalink URLs into requests that WordPress can process. Because its name begins with a dot, many FTP clients and file managers hide it until you enable an option such as “show hidden files.”
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
How permalink rules are generated
When you save the Permalinks settings in the WordPress dashboard, WordPress can display the rewrite rules required for the selected structure. On hosts where WordPress cannot write the file automatically, copy the displayed rules into the correct .htaccess file in the site root. The exact file location follows the Apache directory serving that site.
Symptoms of a bad rule
- Every post or page returns a 404 while the home page works.
- Images, stylesheets, or scripts stop loading after a server change.
- The site shows a 500 error immediately after editing the file.
- Another application in a subdirectory is redirected unexpectedly.
Restore the previous copy if a change causes an outage. If the dashboard still works, resaving Permalinks can regenerate standard WordPress rules; custom redirects and security directives may need to be reapplied manually. Nginx and other non-Apache servers do not use .htaccess for their primary rewrite configuration, so ask the host where equivalent rules are managed.
Other files in the installation root
The root usually contains the front controller index.php, login and request handlers such as wp-login.php, and bootstrap files such as wp-settings.php. It may also contain update-related files, a license, a readme, or host-specific files. Their exact set changes with the WordPress version, enabled features, and hosting tools.
Do not delete an unfamiliar root file merely because it is not one of the three main directories. Check its role, owner, modification time, and whether a plugin or host created it. During a core refresh, use a clean package rather than selectively copying random files from another site.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to access WordPress files safely
Hosting control panel file manager
A hosting control panel can be convenient for one-off edits, downloads, permission checks, and hidden-file visibility. Confirm that you are in the correct site’s document root before changing anything. Use the file manager’s archive or download function to create a recoverable copy first.
Free tools Windows power users keep installed
One-click scans. No signup required.
SFTP or FTP
SFTP encrypts the connection and is preferable when the host provides it. Traditional FTP may be available but does not provide the same protection for credentials and file transfers. Use the account assigned to the correct site, verify the remote path, and enable hidden-file display so that .htaccess is visible.
SSH
SSH is efficient for experienced administrators who need to inspect ownership, permissions, logs, or large directories. Avoid running recursive ownership or permission commands copied from an unrelated server: a wrong command can lock WordPress out of its own files or expose private data.
WordPress’s Filesystem API
The WordPress Filesystem API abstracts secure read and write operations across different host types. Plugins and themes should use this API instead of assuming that PHP can directly write to any path. Whether direct access works depends on the host’s filesystem, ownership, permissions, and connection method. A request for FTP or SFTP credentials in the dashboard can therefore reflect the server’s security model rather than a WordPress defect.
Permissions, ownership, and write failures
WordPress must be able to read its core files and, where required, write to locations such as wp-content and the uploads directory. The correct settings depend on the web server user, filesystem ownership, isolation model, and hosting provider. There is no single permission value that is safe for every server.
When uploads fail
- Confirm that the configured uploads path exists and is inside the intended site.
- Check that the web process can write there without making the directory world-writable.
- Verify available disk space and any host quota.
- Look for a security or storage plugin that changes the upload destination.
- Test with a small file, then inspect the resulting path rather than assuming the default location.
If the host requires a connection method for writes, use the credentials and protocol supported by that host instead of weakening permissions.
What to back up before maintenance
A useful backup contains both the database and the complete filesystem. For the files, preserve wp-config.php, all of wp-content, .htaccess, and the remaining WordPress files. WordPress’s backup guidance notes that core files can generally be replaced from a fresh download, while site-specific themes, plugins, uploads, and configuration need preservation.
File backup priorities
wp-contentin full: this captures themes, plugins, uploads, must-use plugins, and plugin-created data.wp-config.php: this preserves database connection details and path or security constants..htaccess: this preserves permalink rewrites and any deliberate Apache directives.- Remaining root and core files: these make a complete image and simplify restoration, even though clean core files are replaceable.
A practical backup procedure
- Record the site’s document root and the configured locations for content, plugins, and uploads.
- Put the backup destination outside the public web root or use storage with access controls.
- Download or archive the listed files and directories without following links into unrelated sites.
- Export the WordPress database separately; files alone do not contain posts, settings, or media-library records.
- Record the WordPress version, active theme, active plugins, and any host-specific rewrite or PHP settings.
- Verify that the archive opens and that representative theme, plugin, upload, configuration, and rewrite files are present.
- Keep at least one copy separate from the server so a filesystem failure or account compromise cannot destroy every copy.
Common maintenance and recovery situations
The dashboard is unavailable after a plugin change
Use SFTP, SSH, or the host file manager to rename the suspected plugin directory under wp-content/plugins. If the site recovers, leave the directory disabled while you review the plugin’s requirements and logs. Do not assume that removing the directory erases its database settings or generated files.
The site shows a database connection error
Open the backed-up copy of wp-config.php and compare the database name, user, password, and server values with the host’s current credentials. Avoid editing several values at once. If credentials are correct, the database service or account may be unavailable; the host can confirm that without requiring changes to WordPress core.
Permalinks return 404 errors
First determine whether the server is Apache and whether the site uses .htaccess. If the file is missing or hidden, reveal dotfiles and restore the known-good copy. With dashboard access, save the Permalinks settings to regenerate standard rules. Preserve custom directives before replacing anything.
Images are missing after a migration
Check the uploads location defined by the installation rather than assuming wp-content/uploads. Confirm that the physical files were copied, that ownership permits reads, and that the database URLs point to the current site. A migration that moves only the database or only the files leaves the other half of the Media Library broken.
Core files appear altered
Compare wp-admin, wp-includes, and root core files with a clean package that matches the installed version. Preserve a copy for investigation, review recently changed plugins and themes, and scan according to your host’s security process before replacing files. Do not overwrite wp-content or wp-config.php as part of a routine core refresh.
A safe decision framework before changing a file
- Identify its role: core code, site-owned content, configuration, or server rule.
- Check replaceability: clean core files are recoverable; custom themes, plugins, uploads, and settings may not be.
- Choose the least risky access method: control panel, SFTP, SSH, or the Filesystem API according to the host.
- Back up before editing: especially
wp-content,wp-config.php, and.htaccess. - Make one reversible change: rename or copy before deleting, and record the original path.
- Test the front end and dashboard: check a page, a permalink, a login, and a representative media file.
Once you can distinguish core code from site-owned data and server configuration, routine WordPress maintenance becomes much less hazardous. The safest default is to preserve configuration and content, replace only damaged core files from a matching clean package, and let the host’s filesystem and server model determine how files should be accessed.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
