Database connect

Move configurations to php-files for security reasons.
The xml-files have a ridiculously serious security issue if htaccess settings are insufficient.