hiding the wp-config.php file