php.ini in public_html

[corbeeresearch]

Hi,

 

It's my first time encountering a php.ini in a public_html folder. and the problem is that when you do a www.example.com/php.ini

you will see the configuration. Is this safe? how do you make it safe?

 

Thanks

 

 

[trq]

Add this to your .htaccess.

 

<Files ~ "\.ini$">
  Order allow,deny
  Deny from all
</Files>

 

This will block access to *.ini files.

[corbeeresearch]

Thanks, it works like magic!