It’s essential that you set permissions on your configuration files and files that include connection settings as read-only. On Apache servers, the config file is .htaccess.
Apache and Litespeed Servers
For Unix/Linux systems set the .htaccess permission file to 444.
If you cannot do this with your FTP software, try using the File Manager supplied with your webhosting account.
Windows Servers
For Windows server systems, set the file as “Read-Only” for “Everyone” and especially the IUSR_xxxxx (Internet Guest Account) user if running IIS, or the “System” account or “Apache user” if running Apache.