mysql php安全

Question

On my php pages, at the top i connect to the database like this

$db = mysql_connect("mysql.site.com","thedb", "pass"); 
mysql_select_db("dbase",$db); 

Is this secure? Could someone somehow scan and view my code, therefore get access to the database?

UPDATE

Reason I ask is because a user was able to get access to my database, and im pretty sure it wasn't through sql injection.

Answer 1

It would be better if you move this snippet to an include file outside of your document root — this will prevent people reading it in case your webserver somehow gets misconfigured and starts serving PHP files as plain text. Although, just by itself, it is secure enough — it is unlikely that somebody will be able to misconfigure your server like this on purpose.