Ticket #48049: 48049.1.patch

wp-load.php

@@ -16 +16 @@
  * @package WordPress
  */
 
+/**
+ * Exit try to access wp-config path.
+ */
+if ( ! empty( $_SERVER['REQUEST_URI'] ) && strpos( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 'wp-config' ) !== false ) {
+        die;
+}
+
 /** Define ABSPATH as this file's directory */
 if ( ! defined( 'ABSPATH' ) ) {
         define( 'ABSPATH', dirname( __FILE__ ) . '/' );