Lets say I want to develop a website with a community, and so I want it to be open source. However, this website isn't going to be static.
However, it seems that revealing the database connections and the queries made is insecure, as the database name, username, and password are all part of the code.
How is sensitive information kept secure on an open-source website?