That would help a bit. Very often some of the cases, the hacks came from hacks that got the details from some .txt file or I saw some @sym directory inside. I have no idea how that got in, but somehow they can get the database user & passwd from there.