Hey all,
We recently had our site hacked by people on the same server using the Unix "more" command.
It basically allowed them to view the source code for PHP scripts on the virtual server account we are using. And make a connection to our database etc. using the username and passwords we had in the source code.
I'm still not totally sure how to remove this risk (without going to a dedicated server), maybe its just our hosting company isn't the best.
In any case, I thought I'd just mention that here so others can take that into consideration when making sites.
Ciao.