Beware of uploading zipped copies of your website online

Have a look see:

http://google.com/codesearch?hl=en&lr=&q=lang%3Aphp+file%3Awp-config+user+-sample&btnG=Search

If your keeping backups online which contains your passwords you could be in trouble.

You shouldn’t be doing it anyway, but before a hacker would have to download each file he found and search it after DL. Now Google lets them search internet wide for forgetfull people.

That is only an issue if you happen to have your archived file *indexable* somewhere - like if you are offering it for download, or you post the address on a forum. Which is very unlikely.

But yes, if you have backups or db dumps online, keep them in the private folder not httpdocs.

Good tip, though indeed it’s not careful practice and I wouldn’t do that.

Not a nice advertising for WordPress, btw...