note 18423 rejected from features.http-auth by zak

Hi, for databases I especially use Textfiles. But some days ago someone was able to locate the Data-Base-File. Although the Passwords are saved in encrypt form now, I fear, that it is possible to decrypt them. I myself tried to program a little application which reads any PHP-File an shows the content in a textarea like this: $file = fopen($filename,"r") ---> $filename was put in by a form echo "<textarea>"; while(!feof($file)){ echo fgets($file,9999); } echo "</textarea>"; Therefore my question is: is it really possible to read every php-script or can they be protected anyway????