If I'm storing a set of login credentials at my server root, is there any security risk in not hashing it if I'm just storing it in a PHP file?

```
$user = 'user';
$password = 'password';

```

I am storing login credentials to a page with locked content on my website that a user has to click a link to receive, incase you were wondering. When the user logs in, I can authorize the login like this, right?

```
include('../logininfo.php');
if ($_POST['user'] == $user) {
//...etc

```

Is there something wrong with this method?