security - Is there any way to view PHP code (the actual code not the compiled result) from a client machine? -

This could be really stupid question ... I started worrying last night to see PHP files Anything can happen to me on a client machine through the browser or some other medium of the server is my concern, I have a file that includes the database user name and password. If I find this file address in a browser or another system There was a way to apply and code If taken, then it will be an issue for obvious reasons.

Is this a legitimate concern? If so, what do people do to stop it?