Originally Posted by k0nr4d

don't ever name any php files .inc...

I could find someone with this script installed, hit their config_submission.inc file in a browser and see this as plain text:

// ftp connection string
$conn = ftp_connect("ftp.yourserverhere.com") or die("Could not connect");

// username and password to login to ftp session
$conn_user = "your_username_here";
$conn_pass = "your_password_here";