Is there any way to view PHP code (the actual code not the compiled result) from a client machine?

Question

This may be a really stupid question...I started worrying last night that there might be someway to view PHP files on a server via a browser or someother means on a client machine. My worry is, I have an include file that contains the database username and password. If there were a way to put the address of this file in to a browser or some other system and see the code itself then it would be an issue for obvious reasons.

Is this a legitimate concern? If so how do people go about preventing this?

Answer 1

Not if your server is configured right. I think discussion on how that is done belongs on serverfault.