On occasion, I'll come across a PHP powered site, some are popular, some are sites that I am visiting for a first time. But what I'm talking about here is when PHP is down on a server. This gives people access to your whole sourcecode - maybe you can protect some files with htaccess (just have index in root, all config files etc... in a folder with htaccess protection so you can't download the files - I haven't tried this but I'm pretty positive it will work), but another method is to place all important PHP files below the root. A lot of people forget that this is possible, and it's a nice secure way to protect your application and your userbase/database. It may be a small tip but if you want to protect your code & database details, this is a good method.