title: how to block access of XML file
body: <p>I created a config file in XML (config.xml)
  index.php reads config.xml and gets all configs(database user/pass, and other things).
  The problem is if you enter to <a href="http://example.com/config.xml" rel="nofollow">http://example.com/config.xml</a> you can read all the xml file and that is a security risk.
  I tried with chmod 600 but group(apache) cant read the file.
  You knows a way to read xml in php and blocks the access outside the server? Thanks for help.</p>