is there a better solution that encrypting data and putting the password in the source? obviously this is for cases where you can't use a hash. it seems to me

is there a better solution that encrypting data and putting the password in the source? obviously this is for cases where you can't use a hash. it seems to me that, at least, it would make sense to have the db and web server physically separate in that case (although i guess someone stealing hardware is not normally a common scenario).