I am new to using postgresql along with php, but something doesn't seem right here. 9/10 examples I've seen using sets the
password parameter in plain text.
For example, here's one sample
$con = pg_connect("host='localhost' dbname='testdb' user='postgres' password='password');
Is this common practice? Does this pose as a security risk? If so, Is there a better way to pass the