I'm writing an open-source program interfacing with a protected MySQL server. I'd like to keep the development environment as close to the production environment as possible. Variables that must be kept secure are passed in via environment variables. Otherwise they are posted to the world.
Which of the following connection parameters should I secure and why?
- Database name
- Server username
- Server user password
- Hostname