Free tools Windows power users keep installed
One-click scans. No signup required.
Edit wp-config.php only after backing up the database and files. Use a plain-text editor through SSH, SFTP/FTP, your host’s file manager, or WP-CLI; change one setting at a time; preserve PHP syntax; and test the site before making the next change. The file normally sits in the WordPress installation root and contains database credentials, table settings, authentication keys, and security-related constants. Restrict its permissions, block direct web requests, force HTTPS for administration, and disable the dashboard code editor to reduce the damage a mistake or compromise can cause.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
What wp-config.php does and why it matters
WordPress creates wp-config.php during installation from the values entered in the setup wizard. It tells WordPress how to connect to MySQL or MariaDB and stores settings that affect cookies, salts, table names, debugging, HTTPS administration, and file-management features. A syntax error can take the entire site offline; an exposed copy can reveal database credentials; and weak or reused salts can leave authentication cookies less trustworthy.
As an Amazon Associate I earn from qualifying purchases.
For a video-game site, that file may protect years of posts, media uploads, user accounts, comments, membership data, and editorial workflows. Treat it as a secret configuration file, not as an ordinary theme or plugin file. Never paste its contents into a support ticket, screenshot, public repository, browser response, or issue tracker.
Back up before opening the file
WordPress’s file-editing guidance starts with “BACK UP FIRST.” Make both backups before changing anything:
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
- Database backup: export the complete WordPress database, including user, option, post, comment, and plugin tables.
- File backup: copy the current
wp-config.phpand the rest of the site files to storage outside the public web root. - Rollback copy: keep the exact pre-change file with its original owner, group, and permissions recorded.
Confirm that the database backup can be opened or restored and that the file copy is readable before proceeding. A backup that exists only on the same server will not help if the account or disk fails.
Find wp-config.php and choose an editing method
The normal location is the WordPress installation directory—the directory containing wp-admin, wp-includes, and wp-content. WordPress can also load the file from one directory above the installation; that relocation is covered later. Do not assume the document is in the web root if the site uses a custom layout or a managed host.
SSH and a shell editor
SSH provides the strongest control when the host allows it. Change to the WordPress directory, make a rollback copy outside the public directory, and open the file with an installed plain-text editor such as nano or vi. Check the path before saving so you do not edit a staging site or another game project on the same account.
SFTP or FTP
SFTP encrypts the connection and is preferable to unencrypted FTP. Download the file, edit it in a plain-text code editor, and upload it back to the same path. Verify that the transfer did not rename it to wp-config.php.txt or change line endings in a way your PHP runtime cannot parse. FTP can work where SFTP is unavailable, but its credentials and contents are more exposed in transit.
Hosting file manager
A browser file manager is convenient on shared hosting. Use its “Edit” action only after confirming the domain, account, and directory. Browser sessions, host logs, and clipboard history can expose secrets, so close the editor and clear temporary copies after saving. Do not use a word processor: it can add formatting, smart quotes, or hidden characters that break PHP.
WP-CLI
WP-CLI’s wp config edit command launches the system editor. When the file is not at the default path, specify --config-file=<path>. Run it from the correct site directory and under an account that has the intended ownership and permissions. WP-CLI is useful for repeatable server work, but it does not remove the need for backups and post-change testing.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
| Method | Access security | Rollback and validation | Ownership and permission control | Best fit |
|---|---|---|---|---|
| SSH | Encrypted terminal session; no browser upload | Easy to copy a rollback file and run syntax checks | Direct control of owner, group, and mode | Administrators with shell access |
| SFTP | Encrypted file transfer | Local backup is straightforward; validation depends on the editor | Can preserve or reset permissions depending on the client | Hosts that provide secure file transfer |
| FTP | Connection is less protected than SFTP | Download-and-edit workflow supports a local backup | Permission controls vary by client and host | Legacy hosts without SFTP |
| Hosting file manager | Protected by the hosting account and browser session | Convenient, but temporary browser copies require cleanup | Usually exposes chmod and ownership controls supplied by the host | Shared hosting without shell access |
| WP-CLI | Uses the server account and shell access | Repeatable command-line workflow; editor still needs syntax care | Works with the account running the command | Managed deployments and experienced operators |
Preserve valid PHP while editing
wp-config.php is PHP source. Keep the opening <?php tag at the top, retain quotes and semicolons, and avoid adding a closing PHP tag. A missing quote or semicolon can produce a blank page or a PHP parse error before WordPress can load.
Make one logical change at a time. Save, inspect the changed lines, and perform a syntax check before moving to another setting group. Never place passwords or keys in shell history, debug output, screenshots, or public logs. Keep a known-good copy outside the web root until every test passes.
Set and verify the database constants
The standard connection constants are:
define( 'DB_NAME', 'database_name_here' );
define( 'DB_USER', 'database_user_here' );
define( 'DB_PASSWORD', 'database_password_here' );
define( 'DB_HOST', 'localhost' );Replace the example values with the exact credentials issued by the host. Keep the spelling, capitalization, quotes, parentheses, and semicolons intact.
DB_NAME, DB_USER, and DB_PASSWORD
DB_NAME is the database name, DB_USER is the account permitted to connect, and DB_PASSWORD is that account’s password. A typo in any one of them commonly produces a “could not establish a database connection” message. Do not confuse the database password with the WordPress administrator password; they are separate credentials.
DB_HOST, ports, and sockets
DB_HOST is often localhost, but a host may require a hostname, a port, or a Unix socket. If localhost fails, use the exact value supplied by the hosting provider rather than guessing. A port is commonly written after a colon, while a socket path is host-specific. Contact the host when its connection details are unclear.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Table prefixes for shared databases
The $table_prefix value identifies WordPress tables. If several installations share one database, assign each installation a unique prefix, such as game_ and news_, so one site does not collide with another’s tables. Changing a prefix on an existing site requires corresponding database changes; it is not a cosmetic edit.
Rotate authentication keys and salts
WordPress uses eight constants for authentication and nonce protection:
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
AUTH_KEYSECURE_AUTH_KEYLOGGED_IN_KEYNONCE_KEYAUTH_SALTSECURE_AUTH_SALTLOGGED_IN_SALTNONCE_SALT
Each value should be long, random, and unique. Generate fresh values with a trusted generator or a secure random process. Do not reuse sample strings copied from documentation, another site, or a code repository.
Changing any of these values invalidates existing cookies, so every user must sign in again. Schedule a rotation when editors and players can handle a forced logout, and warn staff before applying it. After saving, test a fresh login, logout, password reset, and an authenticated action that uses a nonce, such as saving a post.
Choose safe file permissions and ownership
WordPress documentation notes that the file is initially created with mode 644. That mode lets the owner write while group and other users can read, which is risky because the file contains database information. Hardening guidance commonly uses 400 or 440, and WordPress update troubleshooting gives 640 as an example. The correct choice depends on which Unix account runs PHP and whether the update process must write the file.
| Mode | What it permits | When it can work | Important check |
|---|---|---|---|
| 400 | Owner can read; no write or access for group and others | PHP can read through the owner account and no process needs to edit the file | Confirm the PHP process is the owner or can read through the host’s account model |
| 440 | Owner and group can read; nobody can write | The PHP/web-server account belongs to the file’s group | Verify group membership and test normal requests |
| 640 | Owner can read/write; group can read; others have no access | The host’s PHP account needs group read access, or an administrative process may write it | Check that “other” users cannot read the file |
| 644 | Owner can read/write; group and others can read | Initial WordPress creation state, not a hardened target | Reduce exposure after confirming the site works |
| 777 | Everyone can read, write, and execute | Unsafe for this configuration file | Do not use it; a file-modifying attacker could gain control of the site and database credentials |
Set the least-permissive mode that still lets PHP read the file and lets your documented update process function. Verify owner and group as well as the numeric mode. A permission that looks secure but prevents PHP from reading the file will take the site down; a permission that allows broad reading defeats the purpose.
Move wp-config.php above the web root
WordPress supports moving wp-config.php exactly one directory above the WordPress installation. For example, if the install is in /home/site/public_html, the file may be placed in /home/site/wp-config.php. WordPress looks there automatically. Do not move it several levels away unless your host’s documented configuration explicitly supports that arrangement.
- Record the current path, owner, group, and mode.
- Copy the file one level above the install, preserving its contents.
- Apply the intended restrictive permissions to the new copy.
- Remove the old public copy only after confirming the new location is readable by PHP.
- Load the homepage, login, dashboard, cron-triggered tasks, uploads, and a representative game article.
An incorrect move can introduce vulnerabilities or prevent WordPress from loading. Keep the rollback copy outside the public directory and restore it if any test fails.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Deny direct web requests
Even when PHP normally executes the file instead of displaying it, configure the web server to deny direct requests. On Apache, WordPress’s handbook gives this rule:
<Files "wp-config.php">
Require all denied
</Files>Place the rule in the appropriate configuration location for the site and use the equivalent deny directive for the actual web server when it is not Apache. Test a request to /wp-config.php from a browser or HTTP client: it should be denied, not download the file or reveal its contents. Confirm that ordinary pages, REST requests, feeds, images, and administration still work.
Harden the WordPress administration area
Force HTTPS for login and admin cookies
Add this constant before the line that says to stop editing the file:
define( 'FORCE_SSL_ADMIN', true );Your site must have a working HTTPS certificate and correctly forwarded HTTPS status. Test the login page and dashboard after enabling it. If a reverse proxy or load balancer terminates TLS, verify that WordPress receives the correct secure request indicator; otherwise you can create redirect loops or mixed-cookie behavior.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Disable the dashboard file editor
define( 'DISALLOW_FILE_EDIT', true );This removes the built-in theme and plugin editor from the dashboard. It limits accidental code changes and reduces the options available to an attacker who obtains an administrator session. Editors can still update code through the normal deployment or file-transfer process.
Understand DISALLOW_FILE_MODS before using it
define( 'DISALLOW_FILE_MODS', true );DISALLOW_FILE_MODS goes further: it blocks plugin and theme installation and updates as well as dashboard editing. Use it only when you have another reliable update path, such as a controlled deployment process. Otherwise, it can leave security updates unapplied and create an operational emergency.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
A safe save-and-test procedure
- Record state: note the current path, owner, group, permissions, PHP version if known, and the working site URL.
- Back up: create tested database and file backups, including the original configuration file.
- Open safely: use SSH, SFTP/FTP, the host file manager, or
wp config edit; never use a word processor. - Change one group: edit database constants, salts, permissions, relocation, or hardening directives separately.
- Check syntax: inspect quotes, semicolons, parentheses, and the opening PHP tag before saving.
- Save restrictively: apply a host-compatible mode such as 400, 440, or 640 and verify owner and group.
- Run functional tests: check the homepage, a game article, media uploads, login, logout, dashboard saves, scheduled tasks, and plugin/theme updates if your workflow requires them.
- Check recovery: confirm that you can reach the host account or SSH path needed to restore the rollback file.
- Clean up: delete downloaded temporary copies and remove credentials from clipboard managers, shell history, tickets, and logs where possible.
Recover from common failures
“Error establishing a database connection”
- Recheck
DB_NAME,DB_USER, andDB_PASSWORDcharacter by character. - Confirm the database account has access to that database.
- Replace an incorrect
DB_HOSTwith the exact hostname, port, or socket supplied by the host. - Restore the last known-good file if the error began immediately after an edit.
Blank page or PHP parse error
Look for a missing quote, semicolon, parenthesis, or damaged opening tag near the last change. Use the host’s PHP error log or a command-line syntax check without printing secrets. Restore the rollback copy first if the site is unavailable, then correct the edit offline.
WordPress cannot read the file after chmod
The mode may be too restrictive for the PHP account, or the owner/group may be wrong. Compare the file with another working PHP-readable file on the same host, restore the documented owner and group, and select the least-permissive mode that permits PHP to read it. Test updates after changing permissions.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesAdmin redirects endlessly after enabling HTTPS
Verify the certificate, the site’s canonical HTTPS URL, and the HTTPS status passed by any reverse proxy. Temporarily restore the previous configuration from the command line or file manager, correct the proxy or redirect arrangement, and then re-enable FORCE_SSL_ADMIN.
Users are suddenly logged out
That is expected after rotating any authentication key or salt. Notify editors in advance, sign in again, and check that password resets and authenticated forms work. Do not rotate keys repeatedly while troubleshooting unrelated problems.
Security decisions to make before finishing
- Exposure: keep the file one level above the install when the host supports it, and deny direct requests at the web-server layer.
- Read access: use 400, 440, or 640 only when the chosen mode matches the PHP account and update process.
- Credential hygiene: use unique database credentials and fresh random salts; never publish them.
- Administration: force HTTPS for admin traffic and disable dashboard file editing.
- Operations: avoid
DISALLOW_FILE_MODSunless another update path is documented and tested. - Recovery: retain a tested rollback file and host access before making changes.
When to stop and ask the host
Pause instead of guessing when you do not know the database host, the PHP process account, the correct owner/group, the web-server type, or whether a proxy terminates HTTPS. Those details determine whether a connection string, permission mode, relocation, or SSL constant will work. Hosting support can provide the authoritative values; you can then apply them in the backed-up file and perform the same validation sequence.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
