maybe htaccess or just use a php config file so that it won't be sent as plaintext