Preventing user from downloading code

[Anon]

I'm the project manager for a small site that hasn't opened yet. I do most of the PHP and MySQL coding. I have a file called functions.php which includes all of the DB passwords and usernames and such. Is there a way so that I can prevent the user from downloading this file? I mean, one slightly above average user could set up a page on their local computer with a link to the functions.php file, and then they could save from target instead of opening the file in their browser. This is a problem that has been lingering in my mind for some time. I don't have that much access to the Apache server, so is there anyway that i can do some clever PHP coding to hide this code?

[brandonschnell]

place the functions.php file outside of the apache web root. this way the only way the file can be included is by the local server referencing the file system path to the functions.php file.

for example if the apache web root is:
/home/httpd/html/
then place the functions.php include file:
/home/httpd/functions.php

now apache won't be able to sent the file out. have your php scripts load the functions.php file like so:
include("/home/httpd/functions.php");

[Anon]

Thanks a bunch.. I'll try it out.