title: Why put MySQL credentials outside of www directory?
body: <blockquote>
    <p><strong>Possible Duplicate:</strong><br>
    <a href="https://stackoverflow.com/questions/3648739/putting-core-classes-above-the-web-root-good-or-bad-idea">Putting core classes above the web root - good or bad idea?</a>  </p>
  </blockquote>
  
  
  
  <p>I keep reading that it's a best practice to put MySQL connection credentials (whether it's a class, defines, etc..) outside of the web root (above the www folder). </p>
  
  <p>Why is this? If the credentials are in a .php file then it doesn't matter if the file is accessible through the browser, right?</p>