[TheLastSuperman]

Originally Posted by Zachery

moving your config file is pretty pointless. You have to change the include(s) for it, which means you are still pointing right at that file.

I dunno... this security through obfuscation is pointless makes sense if you're you or me (now keep reading lol) but what about a technician from crowdgather after buying a client of mines forum who had to call me to ask why the details in the config file were wrong and how was it still able to connect? It sure fooled him (who was experienced in vBulletin and various other forums including relocating them etc) so I guess it depends on the level of intelligence of the person trying to gain entry to your site i.e. if a script-kiddie then they won't know where to look so in essence security through obfuscation does work in a sense. Anything you can do to "throw off" someone trying to get into your site will help, you can't argue that.

Also OP as ShawneyJ mentioned remove vBSEO, your just a hacked site waiting to happen imo if you continue to run it.

Edit: Also look for the reference to config.php in /includes/class_core.php and change it there too, that is probably where you missed changing the filename and why it is not working.