upgrade.php open to anyone?

Yup – and nothing will happen ??
Delete it if you want,. but it’s very very safe to leave just where it is.

So too install.php and every other file.

as long as it’s cool – I’ll just leave it as is.
Thanks!

Many weblog packages provide some feedback to the user after they install as to what files might/should be deleted. Some even go as far as not letting the software continuing loading until teh files are deleted.

With wordpress, no files need to be deleted, and so, there is no message for the user.
Ain’t that neat?

But if you really wanna delete the install files, check the WIKI. There’s a list there.