Sounds like it was an "accident". The web server served up the source code rather than compiling the PHP, which someone then saved.