I always use a include for any hashes or passwords in a separate file. When I started learning PHP I exposed my MySQL database password more times then I could

I always use a include for any hashes or passwords in a separate file. When I started learning PHP I exposed my MySQL database password more times then I could keep track of. It does hammer home the point of staging before deploying. Also the point of making sure you vary your passwords between sites.