The easiest way would be to leave the fake info in the config.ini and hard code the real info in the function that checks the connection.

Or you can have the real information in a file that is not accessible to www an get it during the connection function.