> What configuration error (technically, by definitions from some IEEE guidelines, mistakes) did they make to have this happening?

They edited .php file on a production server and made a typo, so the file, containing sensitive information started with "i?php" instead of "<?php".

My guess that happened because someone used vi/vim and hit "i" twice.