Secure storage of database credentials

Question

Had a major problem recently where my web hosting company messed up and all my php files were displayed in plain text. This was a major issue for me for obvious reasons. Mai

Answer 1

If for some reason xbonez's answer doesn't work (lets say one doesn't have access to a non document_root folder).. You can achieve the same thing by using .htaccess

 order allow,deny
 deny from all

This, should in theory (non tested) protect the file from being used in the browser but not block php from including said file.