title: Where to store database login credentials for a PHP application
body: <p>We have a development server and a live server with different database connection details (username, password, etc).</p>
  
  <p>Currently we're storing BOTH the database connection details in a initial.php and one is selected if a DEFINE statement is present. We manually add that DEFINE statement on our live server.</p>
  
  <p>Is this a safe approach? What are better / alternative approachs for managing DB connection security?</p>
  
  <p>One consequence of this is that every developer can see the database connection details and that's a bit risky...</p>