Store passwords in a php file, and therefore I assume nobody can access them.