How to protect .env file in Laravel

Question

I moved my project to HOST but I can still access .env with address mysite.com/.env and display this file with all variables and secure data. my .env file :

Answer 1

You should change permission all folder on your app to 741, except bootstrap and storage and public (755).