If the option for saving parsed cals in /tmp is set to 'yes' the file is saved in /tmp world-readable.
Adding following line to 'functions/ical_parser.php' solved the problem.
line 1165: chmod ($parsedcal, 0640);
Fixed in CVS. I decided to use mode 0600, however. There's no reason for the web server group to have read access, either.
Fixed in CVS. I decided to use mode 0600, however. There's no reason for the web server group to have read access, either.