title: Is it necessary to unset php password variable?
body: <p><strong>Is it necessary to unset my password variable for my MySQL database.</strong></p>
  
  <p>Currently, my code for my "dbpwd.php" is like this:</p>
  
  <pre><code># database setup
  $dbserver = "localhost";
  $db_usrname = "blah";
  $db_pwd = "blahblahblah";
  $dbname = "blah";
  </code></pre>
  
  <p>but I was thinking.... is this a securtly concern.. because anyone can just do this:</p>
  
  <pre><code> &lt;?php
   include 'http://www.mywebsite.com/dbpwd.php';
   echo $db_usrname;
   echo $db_pwd;
   ?&gt;
  </code></pre>
  
  <p>Wouldn't that give them full access to my stuff... so is it good practice to unset variables that are sensitive at the end of your php code? or is there something that I am missing?</p>
  
  <hr>
  
  <p>Edit to clarify...</p>
  
  <p>In this situation listed above... they would be using their own php server (not mine), and using include from there php file to get information from my server. </p>