How do i prevent showing of config file

Seybanks

I have a file config.php and it includes ~define('ftp-server','server name');
Define('ftp-user','username');
Define('ftp-pass','password');~
My application supports the use of plugins which can be hooked to admin The problem is that in a plugin file for example, if i use ~ $msg=ftp-pass.' is the password'; mail('email@email','subjet',$msg); ~ the email will be sent along with the password... Still a quack in php..pls help... #am sorry i dont know how to format questions on phpbuilder.. Thanks

NogDog

Afraid it's not clear to me what you are asking. I can help a bit though in pointing you to http://board.phpbuilder.com/misc.php?do=bbcode for all the available BBCode tags you can use here, including the important [noparse]

...

[/noparse] tags for showing us your code.

Seybanks

I have a script which works like wordpress in which it will support themes or plugins. If a theme developer writes for example: echo ftp-pass , it will be displayed to the world, it can also be mailed which can leads to hacking of innocent websites. So my question is "is there a way to prevent the use of those defined constants from being used in themes or plugins? Or it can only be prevented by manual check of the themes or plugin. Note: it's compulsory i put the config.php at the top because other functions needs it. Thanks.