WordPress glossary
wp-config.php
The core WordPress config file holding database credentials, security keys, and tuning constants.
Last updated ยท Reviewed by Ali Hassan
wp-config.php sits at the WordPress root. It defines the database connection, salts, debug flags, memory limits, and many tuning options. It should never be world readable. A leaked wp-config exposes the entire site.