Scary. I remember an old cPanel bug where a php error log ended up publicly accessible, you can guess the rest...