Sorry Angela that was a bad joke:)
anyway, by default drupal 7 saves files in the sites/default where Your settings.php. This should not be. Your sites/default folder permissions should be owner - read\execute 500 and Your settings.php should be owner - read 400. You should move saved files to sites or sites/all i am sure it was just an overlook.
Hope everyone has a Great Holiday!