It’s essential that you set permissions on your configuration files and files that include connection settings as read-only. On Apache servers, the config file is .htaccess.

Apache and Litespeed Servers

For Unix/Linux systems set the .htaccess permission file to 444.

FTP change file permissions
Set file permissions 444

If you cannot do this with your FTP software, try using the File Manager supplied with your webhosting account.

File Manager change permissions
Cpanel .htaccess permission

Windows Servers

For Windows server systems, set the file as “Read-Only” for “Everyone” and especially the IUSR_xxxxx (Internet Guest Account) user if running IIS, or the “System” account or “Apache user” if running Apache.

Windows Commander for IIS server