Question

We have a custom php.ini and .htaccess file in the root of the web tree.

The .htaccess cannot be accessed by default but the php.ini can be accessed.

For example:

http://example.com/php.ini

Whats the recommenced procedure to block access to the php.ini file?

Answer 1

Also if you must have it in the public folder try:

<Files php.ini>
  order allow,deny
  deny from all
</Files>