You can usually FTP to the webserver and see the files. Most of the time you don't even have to know the password to the account, as it is marked as a public view folder/file. You won't have permission to change anything on it though.
This is an old technique used to find login
assword encryption files.