fixes http://bugs.owncloud.org/thebuggenie/owncloud/issues/oc-987

diff --git a/lib/config.php b/lib/config.php
index e3a9c11f2477b5fb2ea54f5e47cbbb1cf9aab1e7..9279549b1bbdcbd6dba11bd5a2b24bba281dfd96 100644 (file)
--- a/lib/config.php
+++ b/lib/config.php
@@ -170,14 +170,18 @@ class OC_Config{
                }
                $content .= ");\n?>\n";
 
+               $filename = OC::$SERVERROOT."/config/config.php";
                // Write the file
-               $result=@file_put_contents( OC::$SERVERROOT."/config/config.php", $content );
+               $result=@file_put_contents( $filename, $content );
                if(!$result) {
                        $tmpl = new OC_Template( '', 'error', 'guest' );
                        $tmpl->assign('errors',array(1=>array('error'=>"Can't write into config directory 'config'",'hint'=>"You can usually fix this by giving the webserver user write access to the config directory in owncloud")));
                        $tmpl->printPage();
                        exit;
                }
+               // Prevent others not to read the config
+               @chmod($filename, 0640);
+
                return true;
        }
 }