(bug 8781) Remind users to check file permissions for LocalSettings.php post-installation

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 4cca7f4..4c04388 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -72,6 +72,8 @@ it from source control: http://www.mediawiki.org/wiki/Download_from_SVN
 * (bug 10181) Support the XCache object caching mechanism
 * (bug 9058) Introduce '--aconf' option for all maintenance scripts, to provide
   a path to the AdminSettings.php file
+* (bug 8781) Remind users to check file permissions for LocalSettings.php
+  post-installation
 
 == Bugfixes since 1.10 ==
 

diff --git a/config/index.php b/config/index.php
index 20c1581..2de9384 100644 (file)
--- a/config/index.php
+++ b/config/index.php
@@ -1374,8 +1374,14 @@ which means that anyone on the same server can read your database password! Down
 it and uploading it again will hopefully change the ownership to a user ID specific to you.</p>
 EOT;
        } else {
-               echo "<p><span style='font-weight:bold;color:green;font-size:110%'>Installation successful!</span> Move the <tt>config/LocalSettings.php</tt> file into the parent directory, then follow
-                       <strong><a href='../index.php'>this link</a></strong> to your wiki.</p>\n";
+               echo <<<EOT
+<p>
+<span class="success-message">Installation successful!</span>
+Move the <tt>config/LocalSettings.php</tt> file to the parent directory, then follow
+<a href="../index.php"> this link</a> to your wiki.</p>
+<p>You should change file permissions for <tt>LocalSettings.php</tt> as required to
+prevent other users on the server reading passwords and altering configuration data.</p>
+EOT;
        }
 }