How to Protect Your WordPress wp-config.php File and Your .htaccess File
The wp-config.php file contains all the confidential details of your site. So it’s pretty important that you protect it at all costs. An easy way to protect this file is to simply place the following code in your .htaccess file on your server.