The files in your are are you files, only you should be able to view them.
IF they are in thw www directory then anyone via the web can see them but if your using php the code will be parsed first thus hidding thr password.
No body else except the server admin should be able to view your files, if they can and you can view others there is a serious security problem!!!
Regards
Darren
http://www.php4hosting.com/