Database security with PHP

Hi! I'm using PHP on a web-server which I administrate to access & change information in a database which is also stored on the server. This clearly means that the username and password for editing the database need to be accessible by PHP => need to be stored in a file which PHP can read. We also allow users on our network to create their own personal web-pages on this server, which is where my problem arises. Any user can, therefore, write a PHP script which prints out the contents of the file which contains my database username and password (since PHP must be able to read this file) and thus gain unauthorised access to the database. Is there any way of avoiding this? I need to provied all of these services on one machine (i.e. obtaining a separate machine for user web-pages is not feasible). Ideas anyone? (I expect this is a common problem so hopefully someone can help!!!) Cheers, Carl --------------------------------------------------- Get free personalized email at http://www.iname.com