It was a rare bug in the 4.2.x and 4.3.x branches of the Apache module running on 2.0.x. The real way this code was leaked was via a plain text version of the

It was a rare bug in the 4.2.x and 4.3.x branches of the Apache module running on 2.0.x. The real way this code was leaked was via a plain text version of the file being stored on the server that the hacker found by trying a bunch of URLs I was speculating at the time, and had recent experience with the bug where source code would be exposed. I found out a little later how it was actually leaked, but then forgot all about it.