Separate class for database connection

Question

Hi,

Is it good from security point of view to create a separate class for connection and use it? or save the connection string in web.config file... Which is the best method?