webslave

I need to know how to download php files in there raw state not the html converted state, my friend had a shopping cart that has just been built on his site and it has major issues that im sure of, just need to prove it to him, the builder of the site left all the admin files viewable with no index or 404 so its all out in the open can anyone help on how to find a way iin so i can prove its vulnerability