I'd like to send my Drupal installation to a colleague, but I don't want him to see the username and the password of my database. Where are these informations stored?
I've seen that the username and the password are written in sitename/sites/default/settings.php, but is it the only file with these informations? Is it sufficient if I change the username and the password in this file and then send my colleague all my Drupal files and my database?
IMO both previous answers (posted with 10 secs difference ...) are incomplete ...
The /sites/default/settings.php file indeed does contain that userid and password, and if you "don't want him to see the username and the password of my database" (as in your question), then you at a minimum remove that userid and password (which you want to keep secret) in that file.
However, your question also contains this:
Is it sufficient if I change the username and the password in this file?
To keep your userid and password secret you are done with only this change. But if you want your colleague to be able to actually use the Drupal installation you want to send, then IMO the answer to that question is NO. Because Drupal requires that the /sites/default/settings.php file that your colleague will be using contains the userid and password that matches with the database after it is restored by your colleague.
Note (credits: sanzante): you should also send your colleague a database dump. And your colleague only has to import the database and edit the settings.php and add the user and password for the imported database. That config (user and password) is not dumped in the database so the colleague must have his/her own.
The settings are stored in sites/default/settings.php. That is indeed the only file with that information and it is sufficient that you change the username and the password in that file.
In a single word "YES". Is sufficient if I change the username and the password in sitename/sites/default/settings.php.
