避免使用硬编码的凭据mysqli php？

Question

I am developing a simple php application which needs connecting to Database This is part of the code that creates connection to db

private $mysqli;

public function __construct()
{
     $this->mysqli = new \mysqli("localhost", "root", "password", "mydb");
}

My question: how to avoid hard-coded credentials, The client required me to avoid this?

where should I put these setting?

Answer 1

Use config file:

require_once("../path-to-your-config/config.php");

Example usage:

require_once("../path-to-your-config/config.php");

class ABC {

    private $mysqli;

    public function __construct()
    {
         $this->mysqli = new \mysqli(Conf::HOST, Conf::USER, Conf::PASSWORD, Conf::DB);
    }
}