The database username and password appear in many PHP web pages, and has remained the same for many years. Both of these are potentially security issues. The username and the password have probably been already leaked because of backups, files at UCLA, etc.
What we can do is:
After the first step, the password will be stored in one file only, so it will be easier to change it. Now it is stored in multiple files, so it is much harder to change it.
The database username and password appear in many PHP web pages, and has remained the same for many years. Both of these are potentially security issues. The username and the password have probably been already leaked because of backups, files at UCLA, etc.
What we can do is:
After the first step, the password will be stored in one file only, so it will be easier to change it. Now it is stored in multiple files, so it is much harder to change it.