Building a secure WordPress website takes a few simple steps that work together to reduce possible security risks. One of those steps is to protect wp-config.php, which keeps your important configuration settings secure. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686