Google Codesearch can display db names and passwords?

Hah!

Don’t store your backups in a publically accessible location. Seems obvious, in retrospect, eh?

oh my!

Maybe a novice question, but…

If I use the built-in WP database backup plugin (I think it’s based on Skippy’s)… and I choose the option “Save a back-up on your server”… will the backup be in one of these ‘publically accessible locations’?

Can I make that location non-public, but still on my server?

Backups go into a directory under wp-content called backup-some_random_num. It would not be found by any sort of casual browsing.

The wp-content directory contains an index.php file, to prevent casual browsing of the folders in question, so unless you post links to your backups, Google will not find them. If you look at the files with the search found above, you’ll notice that none of them fit the pattern defined by the backup plugin for its files. These are backup files that people uploaded to CVS/SVN or files that they put on a server and linked to from somewhere.