Make master key unreadable to others (bug #410)

adminer/include/functions.inc.php

@@ -1065,6 +1065,7 @@ function password_file($create) {
 	if ($return || !$create) {
 		return $return;
 	}
+	umask(066);
 	$fp = @fopen($filename, "w"); // @ - can have insufficient rights //! is not atomic
 	if ($fp) {
 		$return = rand_string();

changes.txt

@@ -1,6 +1,7 @@
 Adminer 4.1.1-dev:
 Fix reading routine column collations
 Unlock session in alter database
+Make master key unreadable to others (bug #410)
 MySQL: Use utf8mb4 if available
 
 Adminer 4.1.0 (released 2014-04-18)