WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini.