Config.php EXPOSED! Don't make this configuration mistake!

Putting Moodle code in /var/www/html and not removing the default virtualhost configuration has over the years exposed many a config.php. In this video I explain what the danger is here (which is going to be even more important from 5.1 onwards) and how it can be mitigated. TL;DR 1. Don't put your moodle code in /var/www/html 2. Delete the default virtualhost file for the webserver (if of course you're not using it) '000-default.conf' in Apache and 'default' in Nginx