in reply to hiding database passwords

How about storing the password in a file and having your script read that file to connect...

Then, keep the password file on a floppy or USB key that is stored in a locked safe when not in use. Paint it neon red and/or glue bells to it if you like.