Hey,
in PHP I often connect to my server to get/insert/delete/update information from several tables, now I use in every PHP file (which needs it) the connect-to-server-code. I wondered whether it can be a risk because there might be programs which also displays the PHP codes of a loaded page so you can see the password and username (are there?).
And if it is a risk / there are such tools/programs, how to make it more safe?

If the password and such are in the code itself, then yes, however, PHP should be server-side, so if you run something on the server that uses the passwords, they don't have any way of seeing it.

There are not. However, a server misconfiguration might reveal your code.

Alright thanks, mod can close topic now.