config.php permissions not 444 or 644. MAJOR SECURITY RISK!