How would i go by having a flatfile with the usernames , config commands etc all in the flat file how would i protect it from anyone being able to see it but still have the config / users functions still operate?
keep it outside (one level up) of your web root... then when you want to call it/write to it: call: $DOCUMENT_ROOT/../flatfile.txt
that way, only the php webserver can read it