Suppose we have a config file with sensitive passwords. I\'d like to version control the whole project, including the config file as well, but I don\'t want to share my pass
Not sure how your config is implemented, but having hierarchical overides is how I would handle this.
You have a main config that contains common config plus dummy username/password (or leave these out altogether). Each developer then creates a local override.config (or whatever) with their specific username/password. The main config goes under source control, the developer (or machine) local overrides do not.
I've done this in .NET but not PHP so I don't know how easy this would be I'm afraid.