If you need to protect your config files go to httpd.conf and add to the bottom:
<Files "config.php"> Order Allow,Deny Deny from All </Files>