[X-or]

Originally Posted by squidsk

That's normal because you should have an .htaccess or equivalent that denies access to files within the includes directory. Where else would you store it? You can't store it in the db because you need the db username and password to access the db.

You missed his point which is the password isn't crypted.

Originally Posted by HM666

Also cracked programs have nothing to do with what the OP is talking about. I'm not really sure where you are going here.

you don't see how malwares such as password stealers could have caused op problems? well....