[object Object]

← back to Wallco Ai

security: strip hardcoded dw_admin DSN password -> env-first. No rotation/deploy.

2d3f9ddfbab3a3c4adde7940bf9117c587ce38c3 · 2026-05-30 09:33:05 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

Diff

commit 2d3f9ddfbab3a3c4adde7940bf9117c587ce38c3
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sat May 30 09:33:05 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first. No rotation/deploy.
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 scripts/generate-cactus-11ft.js | 2 +-
 scripts/publish-cactus-11ft.js  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/scripts/generate-cactus-11ft.js b/scripts/generate-cactus-11ft.js
index 4fe7229..c3023a2 100644
--- a/scripts/generate-cactus-11ft.js
+++ b/scripts/generate-cactus-11ft.js
@@ -228,7 +228,7 @@ for (let i = 0; i < DESIGNS.length; i++) {
     const id = parseInt(m[1], 10);
     ids.push(id);
     const up = spawnSync('psql', [
-      'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified',
+      (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified'),
       '-c',
       `UPDATE spoon_all_designs SET title = $$${title.replace(/\$/g, '')}$$ WHERE id = ${id};`,
     ], { encoding: 'utf8' });
diff --git a/scripts/publish-cactus-11ft.js b/scripts/publish-cactus-11ft.js
index ae7ac02..4d217c0 100644
--- a/scripts/publish-cactus-11ft.js
+++ b/scripts/publish-cactus-11ft.js
@@ -29,7 +29,7 @@ const { spawnSync, execSync } = require('child_process');
 const fs   = require('fs');
 const path = require('path');
 const ROOT = path.join(__dirname, '..');
-const DB   = 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified';
+const DB   = (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified');
 
 const argv = process.argv.slice(2);
 const FLAGS = Object.fromEntries(argv.map((a) => {

← fb0b8e2 fix: backfill-wallco-rooms uses sudo -u postgres psql on Lin  ·  back to Wallco Ai  ·  scripts/security-monitor.sh — 10-min cron detector for UID-0 044da51 →