Ok, thats my problem, this file is mine (user curro) and it have read permission for other users. Maybe I have to change the owner to the webserver (do you know if is it wwwdata in apache?), put my user in the group and no permission to other users. Do you think it's a good solution? Did I explain it well?
By the way, I saw in your profile that you are a moodle developer, so i must say: Congratulations!! You are making a fantastic Job. Thank you very much. An thnks for the help too