security precaution: leave the my.cnf readable only to the webserver. we're protected by the openbasedir

install/alternc.install

@@ -91,6 +91,8 @@ if [ -r /etc/alternc/my.cnf ]; then
     # * convert mysql variables into our MYSQL_ naming convention (;s)
     # * print the result (;p)
     eval `sed -n -e "/=/{s/ *= *\"\?/='/;s/\"\?\$/'/;s/host/MYSQL_HOST/;s/user/MYSQL_USER/;s/password/MYSQL_PASS/;s/database/MYSQL_DATABASE/;p}" /etc/alternc/my.cnf`
+    chown root:www-data /etc/alternc/my.cnf
+    chmod 640 /etc/alternc/my.cnf
 fi
 
 WARNING="WARNING: Do not edit this file, edit the one in /etc/alternc/templates and launch alternc.install again."