moving wp-config

[martian101]

Hi, everyone.

I contacted a support team from a certain plugin I recently bought. Since explaining the details in words makes the problem solving a slow process, they wanted access to my FTP instead.

It's fine with me giving them access to my FTP since FutureQuest (thankfully) allows us to give them limited access, but I don't want them to see my wp-config file.

So, how do I move my wp-config file outside my domain's /www directory? Though I've read some materials on how to do it, but I'm having second thoughts.

Any help will be much appreciated.

Thanks in advance!

[Bob]

Two separate Articles I have found indicate that WordPress will automatically look in the directory above the web root (www) for the wp-config file if not located in the /www

https://wordpress.stackexchange.com/...lly-beneficial

How to move wp-config.php to any location on your server

WordPress will automatically look one directory above your WordPress installation for your wp-config.php file, so if that's where you've moved it, you're done!

http://www.wpbeginner.com/wp-tutoria...-may-not-know/

By default it is located in the root WordPress folder, but you can move it. It can be moved outside your public_html directory, so users cannot access it. WordPress knows by default to look in other directories, if the files is not found in the WordPress root folder.

-Bob

[martian101]

Thanks, Bob!

I also just want to know from FutureQuest's perspective since my sites are being hosted here. Is it okay to move wp-config outside /www directory in FutureQuest? Wouldn't it break anything, etc.?

Pardon me if the question's a no-brainer. I just want to make sure.

[Bob]

As far as I am aware there should be no problem, however I personally have never moved a WP config file from the WordPress root so...

-Bob

[martian101]

I see. I'm definitely gonna need a backup for this.

Thanks again, Bob!

[Bob]

An easy way to test this would be to use your CNC File Manager, copy the file into your xdomain directory and then rename the wp-config file in your /www and see if your WordPress install still works.

If it does then you can take the renamed wp-config file out of your /www permanently...

-Bob

[martian101]

Just thought of giving an update. I just moved my wp-config outside /www directory. So far, my site's working.

I guess it won't be vulnerable to hacking, right? Unless someone knows my CNC creds?

[Bob]

Most WordPress hacks are usually through plugins and themes as far as I know so...

-Bob

[martian101]

Originally Posted by Bob

An easy way to test this would be to use your CNC File Manager, copy the file into your xdomain directory and then rename the wp-config file in your /www and see if your WordPress install still works.

If it does then you can take the renamed wp-config file out of your /www permanently...

-Bob

Ah. Never thought of this. This would have saved me from having a minute full of suspense.

[martian101]

Originally Posted by Bob

Most WordPress hacks are usually through plugins and themes as far as I know so...

-Bob

Whew. This is good to know. Thanks, Bob!