Because we need to supply connection string in order to connect to SQL Server, eg:

lconn = SQLSTRINGCONNECT("DRIVER=MYSQL;SERVER=192.168.100.180;DATABASE=purchase;UID=uesrid;PWD=1234")

So anyone can find out the login detail, including user id and passward.

Does it have any better way to prevent unauthorized party to find the login detail?

TIA.