Security: htaccess files

Hi,

I messed around with the rewrite rules, but my server doesn’t seem to support mod_rewrite which resulted in me not able to display ANY WP site afterwards–including the settings site to undo my changes!

Well, since I remembered that these rules are defined in .htaccess files, I fired up gFTP and deleted the .htaccess file in the top level directory.

However, since these files are also often used to secure directories, is it possible that my Blog is now unsecure? I noticed that anyone can go ahead and download my wp-config.php, where my database URL and password are stored, but it always was zero bytes after downloading; but still, I want to make sure I didn’t open my blog for some kiddy hacker to mess with it.

Thanks in advance,
Matthias