WordPress File Lock – Lock index.php, .htaccess files, wp-config.php and wp-blog-header.php With Read Only Permissions
404 File Permissions
.htaccess files should have 404 File Permissions
Owner Permissions – Read On – Write X – Execute X
Group Permissions – Read X – Write X – Execute X
Public Permissions – Read On – Write X – Execute X
400 File Permissions
index.php, wp-config.php and wp-blog-header.php should have 400 File Permissions
Owner Permissions – Read On – Write X – Execute X
Group Permissions – Read X – Write X – Execute X
Public Permissions – Read X – Write X – Execute X