Index: INSTALL.txt
===================================================================
RCS file: /cvs/drupal/drupal/INSTALL.txt,v
retrieving revision 1.37
diff -u -r1.37 INSTALL.txt
--- INSTALL.txt	5 Dec 2006 05:47:37 -0000	1.37
+++ INSTALL.txt	30 Dec 2006 11:25:57 -0000
@@ -86,7 +86,15 @@
    To run the install script point your browser to the base url of your website
    (i.e. http://www.example.com). You will be presented with the "Database
    Configuration" page.
-
+   
+   The install script will write-protect the settings.php file after updating
+   it with the database information you provide in the installation routine.
+   If you make manual changes to that file later, be sure to protect it again 
+   after making your changes. Failure to remove write permissions to that file 
+   is a security risk. The default location for the settings.php file is at 
+   sites/default/settings.php, but it may be in another location if you use 
+   the multi-site setup, as explained below. 
+   
 4. CONFIGURE DRUPAL
 
    When the install script succeeds, you will be directed to the "Welcome" page.