Moving wp-config.php: Can this be done after site launch?

You can safely move it as far as I know…. but what do you mean folder?

Up one level would already be a folder….

if your site is in html, or public_html or whatever, you place the wp-config file in whatever folder holds your html or public_html folder

like if your path is /home/content/u/s/e/user/html/

And your WP is in html, the wp-config would go in user, the next folder up which is not web accessible. WP will automatically look for it there

If you are on shared hosting, you probably can’t do that anyway

And if you have WP in a subdirectory, there would be no point in moving wp-config, as moving it up a level would still put it in a web accessible directory

Related Posts:

  1. What is the difference between a cer, pvk, and pfx file?
  2. How to solve “Kernel panic – not syncing – Attempted to kill init” — without erasing any user data
  3. Is it possible to decrypt SHA1
  4. Simplest two-way encryption using PHP
  5. Error `sec_error_revoked_certificate` when viewed in Firefox only
  6. Convert .pfx to .cer
  7. Why should I use the esc_url?
  8. How safe / sanitized is wp_insert_posts()?
  9. Where to securely store API keys and passwords in WordPress?
  10. Why escape if the_content isnt?
  11. Full path disclosure on rss-functions.php
  12. What to use instead of wp_kses() in user output
  13. Are the default salts secure?
  14. is_email() VS sanitize_email()
  15. Subscribe to email for security fixes?
  16. How to escape custom css?
  17. Understanding SVG vulnerabilities in WordPress related to a specific fix
  18. How to secure or disable the RSS feeds?
  19. Regular security checks – what steps should be included?
  20. What are the pros and cons of using a custom front-end to retrieve content from a WordPress back-end
  21. Do Cookies Need to be Sanatized Before Being Saved?
  22. Disable external access to REST API Endpoint
  23. Make password invalid once logged out of password-protected page
  24. What is the wp-includes/certificates/ca-bundle.crt used for?
  25. Do you need to escape hard coded plain text?
  26. Encrypt emails?
  27. WordPress salts set in config and database
  28. Disallow file edit not preventing plugin install
  29. How to secure WordPress XMLRPC?
  30. Protecting HTML5 video [closed]
  31. How can I find security hole in my wordpress site?
  32. Does WP show me if I’m logged in from multiple locations?
  33. Do I need to use the esc_html() function on hard coded links?
  34. Is it necessary to use esc_url with template tags such as get_permalink?
  35. WordPress Malware Problem help! [duplicate]
  36. Staging Site: Made Public – Security Questions
  37. Frontend Password change
  38. Restrictive File Permissions
  39. Downloading File from Outside Web Root
  40. Why are xmlrpc.php and wp-cron.php being called so often?
  41. Using esc_html with HTML purifier and CSSTidy: Overkill?
  42. wordfence scan warning on W3 Total Cache [closed]
  43. site get login attempts after htaccess ip restriction
  44. Is it good security advice to install wordpress in subdirectory but link to root?
  45. No option “I would like my site to be private, visible only to users I choose” in Privacy Settings
  46. wp-config.php modified?
  47. Moving wp-config.php up 2 levels
  48. How Could I sanitize the receive data from this code
  49. WordPress SQL Injections through User Agent
  50. How to save iframe tag into a post?
  51. Is is necessary to use security plugin for wordpress? [closed]
  52. How to prevent wp-login brute force attack from thousand of different IP? [duplicate]
  53. What permissions should I give directories if I want to make WordPress more secure?
  54. How to protect wp-admin through .htaccess?
  55. Something is unescaping all html entities before output to browser [closed]
  56. Is wp_kses the right approach in sanitizing this string?
  57. Renaming install.php for security?
  58. Limit Login Attempts BEFORE PHP is executed?
  59. Which Versions of WordPress Ship with the Patched TimThumb?
  60. Safe to say WordPress security releases don’t have database upgrades
  61. Use global variables or function that returns said variables for site-wide private-ish WP settings?
  62. fail2ban to prevent Brute Force Attacks on WordPress?
  63. Use Google authentication for pages within a website [closed]
  64. How to give the same error message when the wrong password or wrong username is used?
  65. Why does WordPress change a file’s permissions?
  66. should I escape a literal url added in functions.php
  67. Outgoing new connection to linked Websites – why?
  68. Moving wp-config.php outside root folder where we have multiple wordpress websites for enhanced security [duplicate]
  69. Adding Security Keys?
  70. How might I sanitize an XML file before WP Import? (Does wordpress verify or clean text when importing from an XML document? )
  71. What highest security brake with wordpress and static files?
  72. Secret keys in SCM
  73. Secure Server after configuration
  74. Uploading attachment (pdf) and prevent download for anonymous user
  75. After limiting the access to my wp-login.php by IP through .htaccess, all my password-protected posts stopped working. What’s the best solution now?
  76. Specific Page/Post Need to Stay Non SSL
  77. Block JSON access over the net
  78. Can someone do something to my website if I posted a snapped image of the header and covered my logo? (On reddit, when explaining a question)
  79. Scan multiple websites for malware that are in same webhost root?
  80. The in-famous Unable to locate WordPress Content directory (wp-content) and the Direct Method
  81. Security: AWS (shared hosting) claims template file malicious
  82. Cannot access wp admin of WordPress website (security plugin issue) [closed]
  83. How to check whether a site has been compromised without browsing into it?
  84. My site thinks it’s secure when it is fact not
  85. Is it possible to only have the admin interface bind to the local loopback?
  86. PHP Code Sniffer – WordPress VIP Coding Standards
  87. Trying to understand nature of hacking
  88. FORCE_SSL_ADMIN affecting subdomains
  89. Default installation permissions for wp-config.php
  90. Correct setup to block file modifications from hackers
  91. Is my WP site being hacked?
  92. Directory to store secure file
  93. How can I give someone server access to only duplicate and modify a site?
  94. WP-JSON: Cross Origin Resource Sharing Vulnerability?
  95. How can I implement ansible with per-host passwords, securely?
  96. Why should I firewall servers?
  97. Does drilling a hole into a hard drive suffice to make its data unrecoverable?
  98. OpenVPN vs. IPsec – Pros and cons, what to use?
  99. Can you alter the default wordpress strong password requirements?
  100. how to sanitizing $_POST with the correct way?

Leave a Comment