I've been following this thread and I thought I would try to adapt the mediawiki instructions for keeping the mysql password out of webroot but I am having trouble with it. After creating a file inside of a folder elswhere on the server and then adding a similar line like this to config.php:
I am having no luck making this work. When I do this the whole moodle site goes down plus it displays the entire external_includes file I created in clear text for the entire internet to see! Until someone posts Moodle specific instructions on how to do this I would suggest that no one tries doing it on a production server.
I have also tried several variations of the above line plus I've tried several different php include strings without success. Does anyone know how to make this work in Moodle?