node.js protecting DB credentials

If you go here: http://armygrounds.com/jsgame/server.js

It's publicly visible and anyone could get the DB credentials.

How do I prevent this? Is it a file permission setting?

via Marc Alexander