How to securely to deploy PHP project with a dbconnect/config file?

Im using Capistrano to deploy my PHP project which is going great (other than the fact that its uploading to current/ and i want to go to / but ill figure that out later), but i need some advice as to where i can securely put my config.php file (contains all the mysql connect info) so that it wont be subject to hackers.

Any know an开发者_开发百科y good methods or links?

Every file will be subjected to hackers if they hack the system... The file location isn't critical, but you can put it above public_html in order to prevent clients accessing it directly. Ironically, even if you put it there - the details can leak to the client due to bad PHP configuration (if having inappropriate error level)

Do you use an .htaccess file? Assuming you're using apache, you can also chown the file to your apache user and chmod it to 600.

I ended up just putting in a directory and added an include .conf file to apache configuration that block access to that directory.