note 18423 added to features.http-auth

Hi, for databases I especially use Textfiles. But some days ago someone was able to locate the Data-Base-File. Although the Passwords are saved in encrypt form now, I fear, that it is possible to decrypt them. I myself tried to program a little application which reads any PHP-File an shows the content in a textarea like this: $file = fopen($filename,"r") ---> $filename was put in by a form echo "<textarea>"; while(!feof($file)){ echo fgets($file,9999); } echo "</textarea>"; Therefore my question is: is it really possible to read every php-script or can they be protected anyway???? -- http://www.php.net/manual/en/features.http-auth.php http://master.php.net/manage/user-notes.php?action=edit+18423 http://master.php.net/manage/user-notes.php?action=delete+18423 http://master.php.net/manage/user-notes.php?action=reject+18423