Keeping database connection parameters in xml file

Question

hi, I have a program which does some operations with database.(Single tier architecture) I will sometimes have to move the application to other systems having the database. In order to make the database connection parameters configurable, i am storing the params such as username, password etc. in an xml file. Is it the correct way to handle the situation? If so will it be safe to store the database password in an xml file? how can i solve the issue? If the application is meant for ordinary users(who may not have the database files), how can we approach the problem? Cconfiguration file will not be easy for him to edit no? Thank you Fadi