[FirstHopSystems]

I always use a include for any hashes or passwords in a separate file. When I started learning PHP I exposed my MySQL database password more times then I could keep track of.

It does hammer home the point of staging before deploying. Also the point of making sure you vary your passwords between sites.

[jasonlotito]

Do not store configuration in code. Store it in files that aren't part of the software. Store this file outside the web root.