wp-config.php outside the web root

  • Resolved siprof

    (@siprof)


    2 years, 4 months ago

    Hello,

    Just reporting what I found. I installed WordPress using WordOps (nginx, mariaDB, PHP 8.0.x) and WordOps by default moved wp-config.php out of the web root.

    When I backup using Total Upkeep, I can’t find wp-config.php in the backup file.

    Regards,
    siprof

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor Joseph W

    (@joe9663)

    Thank you for reporting this to us siprof!

    Out of curiosity, where does WordOps put wp-config.php if it is not in the web root directory? Is there some kind of special subdirectory that they use for all WordPress core files or is wp-config.php the only in a different location?

    It sounds like we might need to make some changes to account for additional non-standard configurations and we appreciate any information you can send us!

    Thread Starter siprof

    (@siprof)

    Hello,

    WordOps by default moves wp-config.php one directory up. Only one file was moved, no special subdirectories or anything else.

    Thank you

    FYI: In all my sites I move wp-config.php up one directory, that is, one level above public_html for security reasons. WordPress by default not finding wp-config.php in its home directory will look for it one level up. This mitigates hackers access to the configuration file.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘wp-config.php outside the web root’ is closed to new replies.