By default wp-config.php, which contains all your most sensitive data, is stored in the top level directory of your blog. What few people know however is that you can actually move this file to the directory above its default location.
If WordPress is installed in the /public_html directory this allows you to move the file completely out of public access.
[...] Moving it to a higher level directory [...]