Ah, yes, that is a good reminder!
Okay, so some follow up questions...
1.) If I have a Linux VPS with "root" access - or I switch to "Managed Dedicated Linux Server" where someone else has "root" access, then in general terms, how hard is it to set up a Directory and Access outside of my base Web Root?
2.) If I do #1, am I avoiding one issue, but perhaps opening myself up to other issues (because maybe enabling things is harder than a NON-Linux Sys Admin like me can handle?! :eek:
3.) How much extra security do you gain by not only removing things like "config" files and "database settings" files from your Web Root, but placing them on a separate Linux VPS or "Managed Dedicated Linux Server"?