Config file changed by PHP hackers with no clue of entry
<p>Well i have a script (It's secure for what i know. e.g. No direct file access using die()). Coded in PHP. But hackers would access the "conf.php" file and change its contents. But not all.</p>

<p>Normal File:</p>

<pre><code>&lt;?php
   /*
    * Some license
    */
     $conf['mysql_host'] = 'localhost';
     //some other details
?&gt;
</code></pre>

<p>After hackers changed it:</p>

<pre><code>Hi, we luve uhhhh&lt;?php
 /*
  * Some license
  */
   $conf['mysql_host'] = 'locahost'];
   //Some other details
?&gt;
</code></pre>

<p>Any solution? Please help. Oh and i did clean variables to prevent any XXS and SQL-injection attacks.</p>
