Index: head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml
===================================================================
--- head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml
+++ head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml
@@ -3423,6 +3423,13 @@
 	  mygroup</literal> if the port needs different values.  This
 	allows the user to override them easily.</para>
 
+      <important>
+	<para>Use <varname>WWWOWN</varname> and
+	  <varname>WWWGRP</varname>, with parsimony, and remember that
+	  every file the web server can write to is a security risk
+	  waiting to happen.</para>
+      </important>
+
       <para>Do not depend on Apache unless the web app explicitly
 	needs Apache.  Respect that users may wish to run a web
 	app on different web server than Apache.</para>