Hi all ! I am working on a website which is being developed using PHP-MySQL. I have to access the mysql database using username - password. The problem I'm having that I have kept username password in another file and used it as variables in wherever I need to connect to DB.

I have one file with username password:
wherever I want to use it, I do the following:
$con=mysql_connect($lhost,$username,$secret) or die("Server not Available");
But I don't think It's a secure practice as anyone can copy your website using website downloaders and can see the password. Is there anyother way to secure the password.