Linked Questions
11 questions linked to/from Is moving wp-config outside the web root really beneficial?
0
votes
1
answer
1k
views
Moving wp-config.php outside root folder where we have multiple wordpress websites for enhanced security [duplicate]
I have moved wp-config.php but my file structure is as given below:
public_html
--abccom
--applecom
--wp-config.php
abcom and applecom folder has wordpress websites both
As advised, I have moved wp-...
- 103
1
vote
3
answers
5k
views
How to improve WordPress security by hiding non public facing files?
e.g.
curl -I http://ma.tt/blog/wp-config.php
200 OK
The wp-config.php is not public facing file, since it currently just return blank page, so why not return 404 instead. (so will not be cached by ...
- 869
4
votes
2
answers
2k
views
Wordpress "Site Health Status" trust it or myself for its security advice?
I'm using WordPress to host a few sites. Lately it includes this feature called Site Health Status. This information has in part been valuable, but it also itches me the wrong way somehow that I can't ...
- 150
0
votes
1
answer
7k
views
how to encyrpt DB_PASSWORD in wp-config
Recently moved my wordpress site to another hosting provider and after importing my database I had issues establishing a database connection. I edited wp-config file and entered my DB_PASSWORD to re-...
- 111
0
votes
1
answer
2k
views
Moving wp-config.php one level up - 500 error - Nginx [closed]
My wordpress installation is at /var/www/html/
I have moved the wp-config.php file one level up to /var/www/
and deleted the original file. However, I am getting a 500 error.
Within the wp-config....
- 668
1
vote
2
answers
1k
views
How do I test to ensure that my wp-config file is protected?
Since order allow,deny is deprecated in 2.4 I wanted to rewrite the rules in my .htaccess file to use the new rules. Previously I was using:
<files wp-config.php>
order allow,deny
deny ...
- 123
0
votes
1
answer
1k
views
How to obfuscate wp-config.php or code
In file wp-config.php it shows database username and password clearly
So, how to obfuscate wp-config.php or code.
Serveral pages support software: ioncube, php encoder or zenguard but I don't know how ...
- 44
-2
votes
1
answer
906
views
Hiding wp-config.php via .htaccess on an install installed in another directory?
Say my wordpress install is here, example.com/wp/ but my .htaccess is in example.com, am I ok with
<Files wp-config.php>
Order Allow,Deny
Deny from all
</Files>
or do I need to ...
- 513
0
votes
2
answers
225
views
How secure is a wp-config file?
Considering the information that is in the wp-config file, how secure is this file? I have password salts in place, but can someone view this file? Or to what level of difficulty can some view the ...
- 115
1
vote
1
answer
157
views
What's the point of forbidding access to wp-config.php?
Probably a dumb question...
the hardening doc suggests setting up your web server so that it prevents access to wp-config.php. If you do this, and a client tries to access the file, Apache returns 403 ...
- 127
0
votes
2
answers
71
views
White screen of death on admin pages after moving wp-config up two levels for security
I moved the wp-config to the hosting root and put it in a new directory and then I included it from the WordPress directory like so: include("../../my-fast-cars/fast-cars.php"); this gave me white ...
- 25