Securing Yabbse?

[sosidge]

YaBB SE Version: 1.5.5
PHP Version: 4.1.2
MySQL Version: 3.23.x
Server Platform: Unix, Linux, or BSD
Link to Forum: www.rc-direct.co.uk/forum

Problem Description:
Something's been bothering me...

Since some of the files with important info (e.g. settings.php) are stored in the root directory of YaBBSE, is that not a security risk?

Could a user who knows the software quite easily access those files and learn the database details, for example?  Then maybe hack from there?

Or am I just being a dumb amateur coder? (probably this).

[[Unknown]]

Unless they gain access to your server, they shouldn't get access to Settings.php.  PHP won't show the source code unless you tell it to.

-[Unknown]

[sosidge]

Relief! Combined with a little embarassment...

Thanks again for your help.