Move config file outside web root dir

www/index.php

 <?php
-if (file_exists('config.inc.php')) {
-    require_once 'config.inc.php';
+if (file_exists('../config.inc.php')) {
+    require_once '../config.inc.php';
 } else {
-    require 'config.sample.php';
+    require '../config.sample.php';
 }
 
 

www/sample.htaccess

+<Files ~ "\.inc.php$">
+Order allow,deny
+Deny from all
+</Files>
+
 RewriteEngine On
 RewriteBase /workspace/UNL_Procurement/www/
 RewriteRule ^file([\d]+)\.jpg$ index.php?view=file&id=$1 [L]