title: Is it safe to deny access to .ini file in .htaccess?
body: <p>I have a .ini file with sensitive information in my php wab app. I denied access to it using a .htaccess file:</p>
  
  <pre><code>&lt;files my.ini&gt;
    order deny,allow
    deny from all
  &lt;/files&gt;
  </code></pre>
  
  <p>I don't have access to folders outside of htdocs, so I can't move the .ini file out of browsable territory.</p>
  
  <p>Is my solution safe?</p>