I have a website hosted on ASP.NET server and using wordpress to build my site. I've extended its functionalities using PHP code. At which directory do I store secure files such as (passwords and certificate.pem)?
My server has the following structure:
-/
-/mywebsite.com
-/data
-/logs
-/wwwroot
-/wp-admin
-/wp-content
-/wp-includes
I understand that ASP.NET has a file called web.config file that is secure and stored at wwwroot
. What's something equivalent using PHP? It is also my understanding that Wordpress stored database password in wp-config.php located at wwwroot
so I assume wwwroot
is a secure directory?
I'm using a shared host btw.
Thanks.