Joomla! Discussion Forums

Yes, I tried this tip but get a blank page now instead of the homepage. I used the absolute path ie require('/../joomla.conf')  and made the mock config file non-writable. What else could be wrong? Is it necessary to have the configuration.php outside the public folder if I run a dedicated host?

If you run a dedicated host, you have a lot more control, and can probably do whatever you want.

In either case, the goal of this trick is to get the config file out of public_html which, dedicated or not, is a world-readable directory. You don't really have to move the file as long as it's permissions are good and tight.

This is VERY helpful! Thank you!

I have a question though...Is there a list somewhere of these "confidential" files that I should move outside of the public_html folder?

Thanks so much for this tip! Every bit helps.

I just moved my config file out of the public folder, took a few tries  , but I too would be interested in what other "confidential" files  should move out of the public_html folder. Oh and how to move them of course.

This doesn't work.

Here's what I did:



And I placed joomla.config here: /home2/robertc/
And Joomla is installed here:      /home2/robertc/public_html/new/

And when I try to load th site, I get this:

Warning: main(/home2/robertc/public_html/new/../joomla.config) [function.main]: failed to open stream: No such file or directory in /home2/robertc/public_html/new/configuration.php on line 2

Warning: main(/home2/robertc/public_html/new/../joomla.config) [function.main]: failed to open stream: No such file or directory in /home2/robertc/public_html/new/configuration.php on line 2

Fatal error: main() [function.require]: Failed opening required '/home2/robertc/public_html/new/../joomla.config' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home2/robertc/public_html/new/configuration.php on line 2

So am I not able to do this trick or am I doing something wrong?


edit: Nevermind, I got it to work, it was a permissions issue, couldn't use 400, so I used 404 on both files, is that ok?

have an interesting question regarding moving config.php into its own folder...after moving the renamed config.php, then uploading the "new" config.php with the suggested code in its place, does it matter whether I save this file using notepad as ansi or utf-8?

This is happening to me as well.  I renamed to joomla.conf in a new folder in the /home directory.  I am on a dedicated server that is running two of my websites ( so i guess its a dedicated shared server ) and can't change the permissions to 404, they keep resetting to 604.  The folder the joomla.conf is in has the permissions of 704.  Is this why I keep getting the blank page when I make the change?  I have tried the new configuration.php file with both the dirname( __FILE path and also typing the specific path with the same results.

Thanks.

For Joomla 1.0.15 would adding: to the beginning of the new configuration.php file help to make this even more secure? So it would look something like this:



I tried it and it and everything seems to be working fine, but I thought I would share and see what everyone else thinks.