Direct access to phprestsql.ini

[keemor]

You can display phprestsql.ini config in the browser
http://example.com/phprestsql.ini

One of the solution is to add:

RewriteRule phprestsql.ini !^$

to .htaccess

[adcoolguy]

Not sure why would anyone wants to do this, definitely a vulnerability as far as OWASP (https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project) is concerned.