title: Storing encryption key for use in PHP
body: <p>I am storing very sensitive information which can be accessed through a php interface. I am currently working on where to store the encryption key. One idea is to store it outside the www folder, storing it in the database is not an option.</p>
  
  <p>Any idea's how this can be done? My idea is that I create a file outside the www folder and only make that file accessable by the webbserver then I load the key from it with PHP and decrypt the data.</p>
  
  <p>How should this key be generated?</p>