I have a website hosted on ASP.NET server and using wordpress to build my site. I've extended its functionalities using PHP code. At which directory do I store secure files such as (passwords and certificate.pem)?
My server has the following structure:
-/ -/mywebsite.com -/data -/logs -/wwwroot -/wp-admin -/wp-content -/wp-includes
I understand that ASP.NET has a file called web.config file that is secure and stored at
wwwroot. What's something equivalent using PHP? It is also my understanding that Wordpress stored database password in wp-config.php located at
wwwroot so I assume
wwwroot is a secure directory?
I'm using a shared host btw.