Config files location
**But shouldn’t configs be outside the public root?**
There’s lots of “should” and theorizing in computer programming, but one reason for the success of WordPress is its pragmatism and user-friendliness. There’s plenty to criticize about WordPress from the perspective of things like “12-factor apps” but let’s remember that WordPress was around before many of these guidelines and even after better approaches have been founded, WordPress is still the king of CMS software for a reason.