Keeping database connection parameters in xml file

hi, I have a program which does some operations with database.(Single tier architecture) I will sometimes have to move the application to other systems having the database. In order to make the database connection parameters configurable, i am storing the params such as username, password etc. in an xml file. Is it the correct way to handle the situation? If so will it be safe to store the database password in an xml file? how can i solve the issue? If the application is meant for ordinary users(who may not have the database files), how can we approach the problem? Cconfiguration file will not be easy for him to edit no? Thank you Fadi

i also having that issue

ito solve this i have coded my Own Encryption and decryption Function

and Stored Setting like

below

             
            
                75ƒ105ƒ114ƒ116ƒ97ƒ110ƒ45ƒ80ƒ67ƒ92ƒ83ƒ81ƒ76ƒ69ƒ88ƒ80ƒ82ƒ69ƒ83ƒ83ƒ
            
            
                115ƒ97ƒ
            
            
                49ƒ50ƒ51ƒ52ƒ53ƒ
            
            
                103ƒ119ƒ101ƒ100ƒ99ƒ
            
            
                68ƒ97ƒ116ƒ97ƒ32ƒ83ƒ111ƒ117ƒ114ƒ99ƒ101ƒ61ƒ75ƒ105ƒ114ƒ116ƒ97ƒ110ƒ45ƒ80ƒ67ƒ92ƒ83ƒ81ƒ76ƒ69ƒ88ƒ80ƒ82ƒ69ƒ83ƒ83ƒ59ƒ85ƒ115ƒ101ƒ114ƒ32ƒ73ƒ100ƒ61ƒ115ƒ97ƒ59ƒ80ƒ97ƒ115ƒ115ƒ119ƒ111ƒ114ƒ100ƒ61ƒ49ƒ50ƒ51ƒ52ƒ53ƒ
            
            
                
            
            
                97ƒ100ƒ109ƒ105ƒ110ƒ
            
            
                49ƒ50ƒ51ƒ52ƒ53ƒ

if Anyone Have better Idea Tell me too .....