More info about database user

diff --git a/doc/install.html b/doc/install.html
index c6d109adefad69ce9b6be8650844149562b6c75e..77480bf8b9404aac5525c36a4ec53a24afd40a7a 100755 (executable)
--- a/doc/install.html
+++ b/doc/install.html
@@ -110,10 +110,13 @@
 <P>&nbsp;</P>\r
 <H3><A NAME="database"></A>5. Create a database</H3>\r
 <blockquote>\r
-  <p>You need to create an empty database (eg "moodle") in your database system \r
+<p>You need to create an empty database (eg "moodle") in your database system \r
     along with a special user (eg "moodleuser") that has access to that database \r
-    (and that database only. For example, don't use the "root" user for the moodle \r
-    database in a production system - it's a security hazard). </p>\r
+    (and that database only. You could use the "root" user if you wanted to, but \r
+    this is not recommended for a production system: if hackers manage to discover\r
+    the password then your whole database system would be at risk, rather than \r
+    just one database.\r
+</p>\r
   <p>eg for MySQL: </p>\r
   <PRE>\r
    # mysql -u root -p\r