Updated SQL creation script to flag password should be changed, and changed

INSTALL to note how important password protection of the pages is.

1 files changed, 7 insertions, 4 deletions

diff --git a/INSTALL b/INSTALL
index 63a25b5..885e59e 100644
--- a/INSTALL
+++ b/INSTALL
@@ -6,10 +6,13 @@ sql/
 
 www/
 	Holds the web site.  This directory should be copied somewhere and
-	configured to be served up, password protected.  How this is
-	accomplished will differ from web server to web server.  It is
-	recommended to run the site over HTTPS to prevent the password being
-	easily sniffed.  The web server must be able to execute PHP.
+	configured to be served up, which MUST be password protected.  This
+	password protection is the only thing stopping a third party accessing
+	your data.  While they would need to know the passphrase to see your
+	passwords, anyone accessing the site can delete and edit entries.
+	How this is accomplished will differ from web server to web server.
+	It is recommended to run the site over HTTPS to prevent the password
+	being easily sniffed.  The web server must be able to execute PHP.
 
 	config.php should be edited and the instructions followed for each
 	config item.