config.php ist world-writeable. Change it's chmod to <font color=#ee0000>664</font>.