Can anyone give me more information on these two different types of files, and which of the two is better for using to store connection details (ie the connection string used to connect to the database) to then be linked to from a file when a DB connection needs to be made? Is either one more secure than the other as far as keeping passwords, etc from prying eyes?