The author mentions that moving the wp-config.php file out of the root WordPress directory is a good security measure, making it nearly impossible to potentially access this file from a web browser.

When I upload my WordPress files to my server, I place all the files in the root directory. What would be an example of doing what the author says?

Would you put your site in a /mysite folder and put the wp-config.php right beside it.

How could you still serve your site if it was inside a folder inside your root directory and not all the files themselves as I stated I do above?

What configuration would you have to change to take this security measure?