PHP Security Consortium: PHP Security Guide: Databases and SQL

Exposed Access Credentials Most PHP applications interact with a database. This usually involves connecting to a database server and using access credentials to authenticate:

phpsec.org