Maintaining a secure WordPress website is easier when important files are protected from the beginning. One effective security practice is to protect wp-config.php and keep your configuration details private. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686