Linked Questions

0 votes
1 answer
877 views

Moving wp-config.php outside root folder where we have multiple wordpress websites for enhanced security [duplicate]

I have moved wp-config.php but my file structure is as given below: public_html --abccom --applecom --wp-config.php abcom and applecom folder has wordpress websites both As advised, I have moved wp-...
user avatar
  • 103
1 vote
3 answers
5k views

How to improve WordPress security by hiding non public facing files?

e.g. curl -I http://ma.tt/blog/wp-config.php 200 OK The wp-config.php is not public facing file, since it currently just return blank page, so why not return 404 instead. (so will not be cached by ...
user avatar
  • 849
0 votes
1 answer
5k views

how to encyrpt DB_PASSWORD in wp-config

Recently moved my wordpress site to another hosting provider and after importing my database I had issues establishing a database connection. I edited wp-config file and entered my DB_PASSWORD to re-...
user avatar
  • 111
4 votes
2 answers
1k views

Wordpress "Site Health Status" trust it or myself for its security advice?

I'm using WordPress to host a few sites. Lately it includes this feature called Site Health Status. This information has in part been valuable, but it also itches me the wrong way somehow that I can't ...
user avatar
0 votes
1 answer
2k views

Moving wp-config.php one level up - 500 error - Nginx [closed]

My wordpress installation is at /var/www/html/ I have moved the wp-config.php file one level up to /var/www/ and deleted the original file. However, I am getting a 500 error. Within the wp-config....
user avatar
  • 638
1 vote
2 answers
978 views

How do I test to ensure that my wp-config file is protected?

Since order allow,deny is deprecated in 2.4 I wanted to rewrite the rules in my .htaccess file to use the new rules. Previously I was using: <files wp-config.php> order allow,deny deny ...
user avatar
0 votes
1 answer
907 views

How to obfuscate wp-config.php or code

In file wp-config.php it shows database username and password clearly So, how to obfuscate wp-config.php or code. Serveral pages support software: ioncube, php encoder or zenguard but I don't know how ...
user avatar
  • 34
-2 votes
1 answer
898 views

Hiding wp-config.php via .htaccess on an install installed in another directory?

Say my wordpress install is here, example.com/wp/ but my .htaccess is in example.com, am I ok with <Files wp-config.php> Order Allow,Deny Deny from all </Files> or do I need to ...
user avatar
  • 513
0 votes
2 answers
201 views

How secure is a wp-config file?

Considering the information that is in the wp-config file, how secure is this file? I have password salts in place, but can someone view this file? Or to what level of difficulty can some view the ...
user avatar
0 votes
2 answers
59 views

White screen of death on admin pages after moving wp-config up two levels for security

I moved the wp-config to the hosting root and put it in a new directory and then I included it from the WordPress directory like so: include("../../my-fast-cars/fast-cars.php"); this gave me white ...
user avatar
  • 25
1 vote
1 answer
41 views

What's the point of forbidding access to wp-config.php?

Probably a dumb question... the hardening doc suggests setting up your web server so that it prevents access to wp-config.php. If you do this, and a client tries to access the file, Apache returns 403 ...
user avatar
  • 25