[object Object]

← back to Watches

security: strip hardcoded dw_admin DSN password -> env-first. No rotation/deploy.

9177627577e09f15b8fb184a21d96c2c6076e7e5 · 2026-05-30 09:32:40 -0700 · Steve

Files touched

Diff

commit 9177627577e09f15b8fb184a21d96c2c6076e7e5
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 09:32:40 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first. No rotation/deploy.
---
 arte-specs-scraper.js                | 2 +-
 thibaut-description-backfill.js      | 2 +-
 thibaut-price-scraper.js             | 2 +-
 thibaut-room-settings-api-example.js | 2 +-
 thibaut-room-settings-scraper.js     | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/arte-specs-scraper.js b/arte-specs-scraper.js
index 3471a0b..7c5f6b0 100644
--- a/arte-specs-scraper.js
+++ b/arte-specs-scraper.js
@@ -4,7 +4,7 @@ const https = require('https');
 
 // PostgreSQL connection
 const pool = new Pool({
-  connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified'
+  connectionString: (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified')
 });
 
 // Slack webhook for completion notification
diff --git a/thibaut-description-backfill.js b/thibaut-description-backfill.js
index 1017870..edf1cd6 100755
--- a/thibaut-description-backfill.js
+++ b/thibaut-description-backfill.js
@@ -12,7 +12,7 @@ const { Pool } = require('pg');
 
 // Database configuration
 const pool = new Pool({
-  connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified'
+  connectionString: (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified')
 });
 
 // Thibaut login credentials
diff --git a/thibaut-price-scraper.js b/thibaut-price-scraper.js
index 136c1ea..3ba40a6 100644
--- a/thibaut-price-scraper.js
+++ b/thibaut-price-scraper.js
@@ -2,7 +2,7 @@ const puppeteer = require('puppeteer');
 const { Pool } = require('pg');
 
 const pool = new Pool({
-  connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified'
+  connectionString: (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified')
 });
 
 const BATCH_SIZE = 10; // Products per batch
diff --git a/thibaut-room-settings-api-example.js b/thibaut-room-settings-api-example.js
index 2f2e624..c320914 100644
--- a/thibaut-room-settings-api-example.js
+++ b/thibaut-room-settings-api-example.js
@@ -10,7 +10,7 @@ const express = require('express');
 const router = express.Router();
 
 const pool = new Pool({
-  connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified'
+  connectionString: (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified')
 });
 
 /**
diff --git a/thibaut-room-settings-scraper.js b/thibaut-room-settings-scraper.js
index c648238..d2094f5 100755
--- a/thibaut-room-settings-scraper.js
+++ b/thibaut-room-settings-scraper.js
@@ -5,7 +5,7 @@ const { Pool } = require('pg');
 
 // PostgreSQL connection
 const pool = new Pool({
-  connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified'
+  connectionString: (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified')
 });
 
 // Thibaut login credentials

← 10ed798 fix(app.js): /api/watches now returns paginated wrapper, not  ·  back to Watches  ·  fix: restore missing dependencies in package.json and respec e4d2c68 →