I'm currently developing a website in PHP and for some parts of the website I use include files. These includes are PHP code so for the browser everything seems to be a long HTML file.
Most of these includes are internal includes in the same top-level directory from the index file. File listing is disabled in the server. It is not possible to see PHP file sources.
But somehow Google bot us hitting one of my internal include files. How can that be possible? From where Google is taking the file names to test? I grep'ed the whole website and there is absolutely no HTML links to any of these internal files.
A practical example could be:
//index.php
<?php include 'xpto.php';?>
//xpto.php
<h1>stackoverflow</h1>
Google is hitting the file xpto.php.