Since the files are in webroot, I'm concerned I'm exposing private information (db config stuff perhaps, I'm not sure because I haven't looked through he wordpress files). If so, how do I set it up so that people don't have access to those files?

Thank you very much

W