after reading this thread i decided to make my config.php files with MySQL database passwords inside more secure and put them in a directory not accessible through any web protocols.
one such directory my host offers is a folder called 'private' that is in the same root direcorty as my httpdocs. the httpdocs has the script that will require() the config.php that will be stored in the 'private' folder.
i tried doing require("/private/test.php");
but got Warning: main(): open_basedir restriction in effect. on the page that requires it.
safe mode is off, but still not working.
any suggestions are greatly appreciated, thanks everyone!