Secret keys in SCM

Your config file shouldn’t be public at all. It includes your database credentials in addition to the 8 SALTs WordPress. (The secret keys alone make it possible to brute force your log-in in a bout a week: http://codeseekah.com/2012/04/09/why-wordpress-authentication-unique-keys-and-salts-are-important/)

WordPress Multi-site Automated migaration script [closed]

It’s not fully automated but I’ve used Cory Lamle’s Duplicator plug-in to move multi-site installs before. Helpful step-by-step if you are the nervous type. These days I just do it manually though. After moving the files and DB I run the Interconnect/IT script to update the URLs. Works great but doesn’t exactly answer your question … Read more

Redirect all www.xyz.com to www.xyz.com/wordpress?

To redirect http://www.xyz.com/ to http://www.xyz.com/wordpress/ add these rules to your .htaccess file: RewriteEngine On RewriteCond %{HTTP_HOST} ^(www.)?xyz.com$ RewriteRule ^(/)?$ wordpress [L] That answers the first part of your question. The rest of it is totally vague to me.