Saturday 20 July 2013

Securing the configuration file



1. Log in to your Web server via FTP, and then locate and open the
.htaccess file to edit it.

See Chapter 2 of this minibook for information on File Transfer Protocol (FTP).

Most FTP programs allow you to open and edit a file on the server by
right-clicking the filename and choosing Edit. This opens the file in the
default text editor on your computer (either Notepad for Windows or
TextMate for Mac).

2. Add the Deny from all code to the top of the .htaccess file.


 

This secures the file from being seen by any bots or search engines on the Web:

<Files wp-config.php>
Order Allow,Deny

Deny from all
</Files>

0 comments:

Post a Comment