Database password related issues in PHP scripts

Database password problems in PHP scripts
PHP If you have database operations, such as MySQL,

In the connection statement, is it only, and can only be entered with a plaintext database password? In this case, the person who has permission to see the script, is not the database password can know?
In that case, like the banking system, online shopping, the security of their database-connected scripts, what is the special place, how to keep the server in the safe? ）。


I do not know whether I asked is very small white, but I do not know. Is there an implicit input method?



------Solution--------------------
So, the problem is that you have permission to see the script, so what is his incompetent authority?

Banking system, most of the online shopping is using Java...java is much more secure than PHP. In addition, the database is basically not MySQL.


------Solution--------------------
In contrast, passwords are more secure to write directly in the configuration file. Because if the server permissions are safe enough, others can't see your MySQL password. Even if your source is leaked, we can configure MySQL so that external HTTP or socket access is not available, which enhances security. Think again, if you do not specify the MySQL password, difficult to each data query, let the user enter the password once? Do you still call the code?

