Protect your Config.php from Hackers

[Angel-Wings]

And what's the different between this and a simple yet working:

<Files ..../includes/config.inc.php">
Order deny,allow
Deny from all
</Files>

???

Doesn't require any modification of core files and result is the same.
Because moving the file out, still no problem to use LFI to get it because you've to change your open_basedir value to the corresponding path.

Moving the file around doesn't add much protection - just a difference for an user getting either a 403 or a 404.

Specially - dunno but I don't like the idea adding something in $HOME to open_basedir