| Subject: | Config.pm leaks database password |
In most standard installs, perl module files will be installed world-readable; therefore it is not appropriate to store the database password in Config.pm.
(I'm not actually sure why this file exists at all; surely we should be using the relevant wiki.conf anyway? storing configuration data in a perl module strikes me as exceedingly horrid)