In the documentation with the forum there is a step bt step guide on moving and renaming the database.
You want to place the database outside of your website on the web server in a private folder.
You then need to edit both the common.asp files to reflect the new location of the database and the new database name.
Once this is done a hacker won't be able to download your database and get the passwords form it.
Also in version 7, you have the added protection of having all passwords 160bit one way encrypted, so even if the database is downloaded and hacker won't be able to get your password.