PDO->__construct('mysql:host=loca...', 'root', 'VKBC8y07dy', NULL)

'root', 'VKBC8y07dy'

VKBC8y07dy

Maybe you need to let professionals do this instead of some amateur who doesn't know what he's doing. Letting a web application use root access to mysql is stupid but revealing the password in your public error trace is just messed up. You guys are going to lose everyone's money, mtgox 2.0