aaronpkif the config file is PHP code then it's okay to put it in the public folder cause visiting the file will return blank content. but if it's a config.json or config.yml then putting it in the public folder means visitors can open the URL and see the contents
