How To Secure WordPress configuration file

Web site running on WordPress has many benefits over other Content Management Systems, and the most important is wp-config.php file that contains very sensitive information about your WordPress installation, including your database detail, table prefix and Secret Keys.

So this file should be secure from hackers because they can find the valuable information stored in the wp-config.php file.If someone get access this file, he can get website database username and password, he could log in and undo everything that you’ve built! Therefore, take whatever steps you can to secure that file so that no one can access it.To do so, follow these steps:

How to protect your WordPress wp-config.php file:
Protect it the .htaccess Way

# protect wpconfig.php
<files wp-config.php>
order allow,deny
deny from all
</files>

After updating your wp-config.php, Change file permission (chmod) on wp-config.php to 640.
Move the WP-Config file to a secret folder

If you move the wp-config file to an unpredictable location and change the code, it would create a problem every time you upgrade WordPress.
So there is a better solution, create a separate PHP file in a non-WWW location and add the location of WP-Config file in it.

Please subscribe, leave a comment, follow this blog and share this article with your friends and colleagues.
by: http://kedirizone.blogspot.com

Share This On :

Tweet

Related Post :