It’s also a good idea to add some additional security to app_config.php, and any other scripts that
contain special values like passwords. You can set the permissions on the file to be more restrictive, or move the
file to some place your PHP script can access, but your web users can’t. Ask your web or server admin for help if
you’re not sure how to do that.