After a week of playing with various CMS implementations I have settled on XOOPS which provided the easiest, most intuitive admin and customization of all I played with.

As I was doing some side-by-side comparisons, I had XOOPS buried down in a subdirectory, and as I have now select it as the one I want to go live with, I'm in the process of (literally as I type this) moving the files up to root. I believe all I have to do is change the path info in mainfile.php to make this work (if that's not the case, I'll be posting for help <grin>).

Anyway, in looking at the mainfile.php I couldn't help but notice that the database login and password are sitting there in plain text. Can anyone in the community talk me in off the ledge; can someone please tell me why this is not a gaping security hole?

Seems mighty dangerous to me .....

JP