How secure is a wp-config file?
This is really more of a server configuration question. By necessity, wp-config.php must be readable by WordPress itself, but file access/security beyond that is really a matter of how your server is configured. Refer to the Codex for recommended file permissions for WordPress. Refer to the Codex for recommended ways to secure wp-config.php Refer to … Read more