Secure database passwords in PHP

Method 1 - modify apache conf or .htaccess

    <files db.php>
    order allow,deny
    deny from all
    </files>

Method 2 - Store them in a file outside web root.    

e.g: include('../private/db.php')

Better approach is Method 1 + 2  :)