Thanks so much Krishna. Since I had the owner part already set to read only, would it be ok to set the file permission mode at 400?
Just two more questions if you don't mind:
1. When I add wp-config.php (in 404 mode) to my url in my browser, the file does not open. Why not if it's public? Is there another way for someone to read that file if the permissions were set to read, as it was before this post at 404?
2. And if "Write" is not allowed for user/owner in 404 mode, why am I able to edit the file and upload it via ftp?
Thanks so much.