Secure installation

[MobileFreak]

Is there a guideline on how to go about ensuring that the installation of Pligg is completely (or at least reasonably) secure?
I tried searching the forum but couldn't find much information about that (beyond deleting the install folder and changing the permissions of the two mentioned files.).

For example, how do I ensure that my files from the server can't be copied or viewed?

I'm posting this for two reasons:
1. I'm a newbie and really know next to nothing about web security
2. Since the structure of a Pligg installation is standard, a Pligg site installed by a newbie like me doesn't seem to be too secure .

[kbeeveer46]

Beyond the things that you've already done there's not much to do on your end. Now on our end there's things like SQL injections and other security vunlerabilites that developers have to make sure won't happen. I think Pligg has done a pretty good job in that area because I haven't heard of anyone having problems.

I've seen a few threads of people's sites being hacked into or something along those lines and one of them was because they left the install folder and the other they were able to gain access to the settings.php file either through FTP or the permissions weren't set correctly.

I'm sure there are plenty more things that can be done but I'm not a security expert either.