Index: INSTALL.txt
===================================================================
RCS file: /cvs/drupal/drupal/INSTALL.txt,v
retrieving revision 1.37
diff -u -r1.37 INSTALL.txt
--- INSTALL.txt	5 Dec 2006 05:47:37 -0000	1.37
+++ INSTALL.txt	30 Dec 2006 11:25:57 -0000
@@ -86,7 +86,15 @@
    To run the install script point your browser to the base url of your website
    (i.e. http://www.example.com). You will be presented with the "Database
    Configuration" page.
-
+
+   The install script will attempt to write-protect the settings.php after
+   updating it with the information you provide in the installation routine.
+   If you make manual changes to that file later, be sure to protect it again
+   after making your changes. Failure to remove write permissions to that file
+   is a security risk. The default location for the settings.php file is at
+   sites/default/settings.php, but it may be in another location if you use
+   the multi-site setup, as explained below.
+
 4. CONFIGURE DRUPAL
 
    When the install script succeeds, you will be directed to the "Welcome" page.