As long as you have your server configured to always parse php files (I don't know why you wouldn't), the server should parse the file before sending the data to client. If you do not output (ie. echo, print_r, etc) the contents of the array, the spambots would just get a file that basically only has <html> and </html>.