Some developers choose to keep functions and routines in a separate file that gets included in the page's header. This approach allows code reuse and change propagation.

Attackers are hiding PHP scripts in EXIF headers of JPEG images to hack websites, just by uploading an image.