Most restrictive file perms that'll still work?

[ubbuser]

Hi for all the *.php files in the /admin directory, what's the most restrictive unix file permissions ?

u+r *.php ?
ug+r *.php
ugo+r *.php ?

Anyway the config.php file that has the database password can actually have an encrypted database password??

[tubedogg]

1) If someone breaks into the Admin CP they have free reign regardless of what you do; and, you still need to be able to use it. So put an .htaccess on it and leave file permissions alone.

2) No.