Thread:Project:Support desk/Open the index.php - How??/reply (5)

Since mw-config should be accessible only for upgrading, it's a good practice to prevent access to it with .htaccess rules or with server configuration, by either disallowing access permanently (removing that restriction when an upgrade is necessary) or restricting access to specific IP addresses. That may be very well the case.