#3 Database informations are not hidden

[Anonymous]

Because filename with database informations has .inc
extension, PHP will not parse it. So if anyone call:
http://www.my-website.com/path/to/inc/lib.inc it'll
show him database parameters.