You can use robots.txt or the .htaccess
file, so that google doesn’t index the mySQL inc files.
Type in Google the following sentence
filetype:inc intext:mysql_connect
The result is a big list of web sites with the inc files indexed in
google, with the username and password of the users of the databases,
for example the
root user. Beware!