Security: Moving application and system folder out of public_html

Hi,
Does it increase the security if I move the application and system folder out of public access to server root?
Also, is there anyway we can use password other than the plain text in database config and email config?
At present, if someone hack the system and manages to get the above file they will easily get access to the database.