secured database access credentials

This may be updated further in the future, but for now the passwords are
no longer stored in the php files used, they are held in an external
file which is protected with htaccess, and the variables are removed
from memory once the database is open