I personally don’t practice that one. All my hosting accounts have multiple blogs installed and if I decide to follow this direction – I’ll be unable to maintain sanity. I choose to secure my blogs using a more comprehensive set of actions, as described in my post “Triple “P” of WordPress Security” or in the DVD you mention.

I did not quite understand the part about changing the wp-config file from out of the root directory to one level up.
I must check your “Lock Your Blog” video (Ultimate Guide to wordpress Security) to see if you explain what is meant by putting the config.php file up one level. The information in this video is great…easy to follow too, but I don’t remember reading about the config.php file being able to be moved.

Having had a website hacked in once, I certainly appreciate having some means of protection for the ones I now have.

I concur with how well the wp-security scan works. When I used it, it identified three of my files which did not have enough security.

Thanks for all the info.
Marcelle Snyder´s last blog ..Soil pH Preferred by Veggies & Herbs

Your Comluv doesn’t work to my link, do you have any idea?