title: Can people see my PHP code if rendering fails?
body: <p>In order to get PHP to run I had to enable Includes on Apache webserver.  No one can actually see my .php files because when they're fetched by the server they're rendered and the client sees just css/html/whatever.  It might just highlight my newness with PHP.</p>
  
  <p>Is it possible for someone to break the PHP-rendering part of my server such that clients would be able to see my .php code when they request a page?</p>
  
  <p>And if this <em>can</em> happen, what are some preventative measures I can take to ensure my commercial code stays closed-source?</p>
  
  <p>Again, this might not even be a real concern, but I'd love to know.</p>