Multiple wp-config.php files in one home directory

Question

It's possible to move wp-config.php up one directory level for security, i.e. into the directory above public_html (sometimes called home or a user name, depending on the web host).

"You can move the wp-config.php file to the directory above your WordPress install", according to http://codex.wordpress.org/Hardening_WordPress#Securing_wp-config.php And I have done that with one WP sites' wp-config.php file.

But how does one do that with multiple WP sites in their own folders in public_html? Is there a way to rename multiple wp-config.php files - something like wp-config1.php and wp-config2.php, etc. - in the home directory for each different WP site? And use .htaccess or some other method to enable each WP install to find its own wp-config.php file?

One solution I guess is Multisite, but that's not possible in this case.

Answer 1

Use one main wp-config.php and name the others according to the name of the host:

• example.com.config.php
• example.net.config.php
• and so on.

In your main wp-config.php write:

$current_config = __DIR__ . '/' . $_SERVER['HTTP_HOST'] . '.config.php';
if ( file_exists( $current_config )
    require_once $current_config;

Answer 2

There are two ways to do this. From your question, it sounds like you have this structure currently:

/home
... /public_html
... ... wp-config.php <- for site1
... ... /site1
... ... ... /wp-admin
... ... ... /wp-content
... ... ... /wp-includes
... ... /site2
... ... ... /wp-admin
... ... ... /wp-content
... ... ... /wp-includes
... ... ... wp-config.php <- for site2

And what you want to do is also move the wp-config.php file for your other sites out of the site root as well. You're correct in pointing out that this will lead to some conflicts because every site will try to include wp-config.php but can't all use the same one.

The bigger problem is that there is no way to use wp-config.site1.php or wp-config1.php or any other variation to keep things separate without hacking core.

If you take a look at the code in wp-load.php you'll see this:

if ( file_exists( ABSPATH . 'wp-config.php') ) {

    /** The config file resides in ABSPATH */
    require_once( ABSPATH . 'wp-config.php' );

} elseif ( file_exists( dirname(ABSPATH) . '/wp-config.php' ) && ! file_exists( dirname(ABSPATH) . '/wp-settings.php' ) ) {

    /** The config file resides one level above ABSPATH but is not part of another install*/
    require_once( dirname(ABSPATH) . '/wp-config.php' );

}

WordPress will only look one directory past its current location and will only look for wp-config.php.

Your best bet would be to push everything up one level further to give yourself some separation. Then point your Apache vhosts file at the new folder locations. So set your directory structure up like this:

/home
... /public_html
... ... /site1
... ... ... wp-config.php <- for site1
... ... ... /wordpress
... ... ... ... /wp-admin
... ... ... ... /wp-content
... ... ... ... /wp-includes
... ... /site2
... ... ... wp-config.php <- for site2
... ... ... /wordpress
... ... ... ... /wp-admin
... ... ... ... /wp-content
... ... ... ... /wp-includes

Your vhosts file will then point www.site1.com to /home/public_html/site1/wordpress instead of /home/public_html/site. Yes, it's a bit more convoluted, but the only way you can avoid this issue.

Answer 3

You could do this:

Copy all the wp-config.php files into the level above the installs, then rename them to something like mysite-wp-config.php and then inside the actual installs, you can have a file called wp-config.php then do this inside that file:

<?php
    include_once(‘/pathtoconfigfile/mysite-wp-config.php’);
?>

This is a theory, I have not tested it.