为AJAX存储数据库凭证的最佳(最安全)方法

In the past I have stored database credentials (username, password) in another file (outside of the web directory) and included this in a PHP page to make connections with the database. Since I have started doing a lot of database interaction via AJAX, I have to change how I do this, since the AJAX script cannot In the past I have stored database credentials