Your config.php. file is still writable....

[Vidar Trane]

…how do I make it only readable?

[Gerry Kroll]

I use FTP to set the file permissions.  On my server, the permissions need to be 755.  Other servers may accept 644.

These permissions are the same as those of all other script files.