如何阻止访问XML文件

Question

I created a config file in XML (config.xml) index.php reads config.xml and gets all configs(database user/pass, and other things). The problem is if you enter to http://example.com/config.xml you can read all the xml file and that is a security risk. I tried with chmod 600 but group(apache) cant read the file. You knows a way to read xml in php and blocks the access outside the server? Thanks for help.

Answer 1

try htaccess.

<Files config.xml>
order allow,deny
deny from all
</Files>