Do I remove config.php after installation?

[pbrommer]

I noticed that config.php has my username and password to connect to my database.  Is that secure?  Do I need to remove that after CMS has completed its installation?


Any help would be greatly appreciated.

Thanks,

Paul

[RonnyK]

Paul,

DON'T remove that file, as that is the file that is used to do all. Indeed the file is there, but is not to be opened by others on the net.

Check point 6 of the following link:

http://wiki.cmsmadesimple.org/index.php ... ck_Install

Basically this file tells CMSMS what to do, so if you go to your domain, the config.php is read and the system knows where the files are stored and what DB with what credentials are there. Without the config.php CMSMS wouldn't start as it didn't know what to do, which DB etc.. and the install-wizard would be started again (if that folder exists).

Ronny

[pbrommer]

Thanks for your help Ronny -

Based on everything else I saw in the forum, I figured the file was more than necessary to run cmsms; it just seemed a little weird that the username and password to my DB are wide open (unencrypted) in a file at the root of my website.