PHP script can read ISPConfig database user name and password

Hello,

I'm wondering, if the fact that a php script of any hosted web site can read ispconfig mysql database username/password can be considered to be a security breach or not.

I can send further details to an ISP config developer in private.

Thanks,
George.

 

This has been taken care of in the current cvs version.