I have a pretty quick question regarding PHP code

if script is hidden from client's browser

and php code are rendered back as HTML to the user

is there a way ever that someone can view your code using say a browser plugin?

or getting your source file and the running that from your localhost?

i dont know if this is possible.

just being curious.

if its not, then whats the use of hiding the config file such as db username and pw from the root directory of your web server?

thanks in advance!

5 Years
Discussion Span
Last Post by diafol


It really depends on how secure your Apache and PHP installations are configured. There are many options to make PHP more secure and suggested practices for making a site secure. It is possible to lock the system down so that they cannot be read but it is not always configured properly.


If your writing in php, no one can see your php coding. Only the sever administrator and the ftp access user, eg you, can see your php coding. The only part of the source code they could get is the html output that you have either echoed, printed or hard coded in. Your php is safe

This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.