Is it safe to provide access to yii config files from the web interface?

Question

PHP

Now I'm thinking about how to organize the storage of parameters configured by the site administrator.
To store in a DB I consider not the decision, optimal on productivity. Store in php files - it will give a gain in speed, but, in my opinion, it can affect security. I would like to know how safe this approach to storing the configuration is?

Answer 1

The configuration files themselves are not safe. It is necessary to somehow check for validity, so that it would not be possible to change the code itself.