From: Thomas Mueller <thomas.mueller@tmit.eu>
Date: Tue, 12 Jun 2012 21:15:44 +0000 (+0200)
Subject: fixes http://bugs.owncloud.org/thebuggenie/owncloud/issues/oc-987
X-Git-Tag: v4.5.0beta1~74^2~421^2~2
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=521294d0bf9803cb4ffdc6fb43bd9b9253fece40;p=nextcloud-server.git

fixes http://bugs.owncloud.org/thebuggenie/owncloud/issues/oc-987
---

diff --git a/lib/config.php b/lib/config.php
index e3a9c11f247..9279549b1bb 100644
--- a/lib/config.php
+++ b/lib/config.php
@@ -170,14 +170,18 @@ class OC_Config{
 		}
 		$content .= ");\n?>\n";
 
+		$filename = OC::$SERVERROOT."/config/config.php";
 		// Write the file
-		$result=@file_put_contents( OC::$SERVERROOT."/config/config.php", $content );
+		$result=@file_put_contents( $filename, $content );
 		if(!$result) {
 			$tmpl = new OC_Template( '', 'error', 'guest' );
 			$tmpl->assign('errors',array(1=>array('error'=>"Can't write into config directory 'config'",'hint'=>"You can usually fix this by giving the webserver user write access to the config directory in owncloud")));
 			$tmpl->printPage();
 			exit;
 		}
+		// Prevent others not to read the config
+		@chmod($filename, 0640);
+
 		return true;
 	}
 }