user passwords are stored in *.user files so it is only database connection strings that are not protected.
拖放文件到此处或点击上传