Joomla! Videos - Adding Security to Joomla! (2007 Feb 3)
It looks like Joomla! requires that all files and folders be installed with the webserver being the owner of them and the configuration file with the database username and password, the Joomla! secret word and other key information is being installed in the public_html folder - both of these situations
can create a security risk ...