title: Protect settings.xml in non-db CMS
body: <p>My system doesn't use mySQL or smth like that. Just files. I have special folder with .htaccess (deny from all). Where I store my settings, admin's password(md5) etc. But in case if hacker get an access to this folder XML files could be easily read.</p>
  
  <p>Thus my questions: 
  1) Does .htaccess file with <code>deny from all</code> provide enough protection?
  2) Is there any built-in PHP function to encrypt files? </p>