secure database connection from plugin

I tried this in perhaps the wrong forum earlier…

How can I securely access a database for a plugin? in otherwords, can I call the database using mysqli_connect() within the plugin, or do I set the (server_location,username,password,db_name) values elsewhere as variables, like in htdocs? What is the proper procedure?