How to secure config.php file

marcyslen · Dec 16, 2016

I saw config.php file in my web root, i am not sure it can be viewed by someone or not, is there a way to secure this file on my hosting?

energizedit · Dec 16, 2016

Most likely it can not be "read" by anyone other than you. But you can change the permissions using the cPanel File Manager, change the permissions to Owner read and everything else as no permissions (Group and Everyone would have no permissions)

You will want to make sure that whatever software (eg. Wordpress) you have installed can still read the config.php file though.

marcyslen · Dec 17, 2016

energizedit said:
Most likely it can not be "read" by anyone other than you. But you can change the permissions using the cPanel File Manager, change the permissions to Owner read and everything else as no permissions (Group and Everyone would have no permissions)

How to change the permissions for my files in cPanel? I leave default setting when uploaded my files to my host. What permission should I set for each file?

energizedit said:
You will want to make sure that whatever software (eg. Wordpress) you have installed can still read the config.php file though.

I want to have several ways to protect my config.php file on my WP sites, I read Wordpress sites could be hacked in different ways.

Nixtree · Dec 17, 2016

You can add ALLOW DENY option in the htaccess which will allow only needed ip's for that php files and all those files and folders can be blocked like this.

Also you can change the permissions of the file to 644 also for such files

UH-Peter · Dec 21, 2016

You can change the permissions for files through the cPanel File Manager or in your preferred FTP program. In File Manager, locate the file you wish to change the permissions for. Next, right click and select Change Permissions from the menu (or select the icon near the top of the screen).

This will bring up the Change Permissions window where you can adjust the settings as needed by checking the box by each permission you want for each level of access (User, Group and World).

Once you are finished editing your file permissions, click the "Change Permissions" button.

Keep in mind that you should only change file permissions if needed. You want to make sure that you aren't allowing more access to your files than is necessary, since that can leave your website vulnerable.

Incorrect file permissions can cause errors or even worse, allow unauthorized users to hack your site. Remember that 777 permissions means that your file is readable, writeable and executable by the "world". This is not common, as it is a rare situation where a file needs to be written and executed by the "world." If you find files or folders with permissions that do not match the default permissons, it's usually best to change them to the recommended permissions.

How to secure config.php file

marcyslen

Member

energizedit

Well-known member

marcyslen

Member

Nixtree

Well-known member

UH-Peter

[email protected]

Latest posts New threads

Latest posts

New threads

Latest Hosting Offers New Reviews

Latest hosting offers

Popular Contributors - Past 30 Days

Sponsors

Tag Cloud