wp-config.php & public_html

[sak3d]

Hi all,

Quick newbie question;
I extracted my entire WP dir to my public_html map, including wp-config.php (containing my DB name & pass).

"Is this safe?"

The map is public so isnt my wp-config file public and therefore accessible by anyone?

Cheers :updown:.

 

[barman]

It's safe.

 

[sak3d]

It's safe.

Cuz of the 3 keys I added in the config file?

 

[amateursurgeon]

yep - if the webserver is set up right, nobody should be able to read the contents of the php file. You might want to check the permissions are not "world writable" on it though (set to 755 in your ftp prog), once you've done the initial setup.

Whenever someone asks "is it safe", I always think of that fucked-up scene in "Marathon Man"

YouTube - Is it safe?

 

[omgyams]

 

[sak3d]

^ lol,

Thanks all

 

[Stanley]

It's safe as long as PHP is running

 

[sak3d]

It's safe as long as PHP is running

Hostgator wont let that happen (I hope..)

 

[nis]

If you want to be even safer: Three tips to protect your WordPress installation