title: can I use .ini for configuration file in PHP?
body: <p>My friend asked me to update a PHP application that his company uses. I found out that the application uses .ini extension for DB configuration file. The file contains DB host address, username, and password!!. The problem is that I can access the file on web-browsers.</p>
  
  <p>I am trying to understand why. Is there any particular reasons to use a regular php file with .ini extension??? I just don't get it.</p>