This is another great reason to "keep config files out of web root." WordPress supports this, although it's not by default, and poorly documented, and even sugg

This is another great reason to "keep config files out of web root." WordPress supports this, although it's not by default, and poorly documented, and even suggested it's not beneficial. http://codex.wordpress.org/Editing_wp-config.php#Configure_Database_Settings http://codex.wordpress.org/Editing_wp-config.php#Configure_D... http://codex.wordpress.org/Hardening_WordPress#Securing_wp-config.php http://codex.wordpress.org/Hardening_WordPress#Securing_wp-c...