The php.ini file is an important file in any website. It gives the configuration of the website and the variables that are used to make the site work (thus, a possible security exploit). So we suggest that you make the following in your .htaccess file (within the /public_html/ folders that disables web access to this file):
<Files php.ini
Order allow,deny
Deny from all
</Files>
With the above update in place, your php.ini is now protected and can't be downloaded or viewed.
- 1 Users Found This Useful