note 23438 added to function.require

For everyone trying to hide their database passwords, realize that if you're on a shared hosting system, you are screwed no matter what. Because, obviously, the webserver can read your password file, and on shared hosting, other users' scripts run as the web server user as well. Meaning they can easily write a Perl or PHP script to look into your directory and read your password file. PHP settings have a way to disable this, but the web server will still likely handle Perl/Ruby scripts or even C compiled CGI programs, which can do the same thing. -- http://www.php.net/manual/en/function.require.php http://master.php.net/manage/user-notes.php?action=edit+23438 http://master.php.net/manage/user-notes.php?action=delete+23438 http://master.php.net/manage/user-notes.php?action=reject+23438