Skip to content

refactor: remove hardcoded passwords from configuration files #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
deepsource-dev-autofix wants to merge 1 commit into
base: v2.9.0.1-base
Choose a base branch
from
Open

refactor: remove hardcoded passwords from configuration files #1

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions Web/Web.config
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -59,17 +59,17 @@
<!-- *********************************************************************************** -->
<!-- *********************** Begin MS SQL database settings **************************** -->
<!-- *********************************************************************************** -->
<add key="MSSQLConnectionString" value="server=yourservername;UID=yourdatabaseusername;PWD=yourdatabaseuserpassword;database=yourdatabasename" />
<add key="MSSQLConnectionString" value="server=yourservername;UID=yourdatabaseusername;PWD=${MSSQL_DB_PASSWORD};database=yourdatabasename" />
<!-- When using MS SQL set this to true for best performance, but if running the web on mono you may need to set this to false. -->
<add key="CacheMSSQLParameters" value="true" />
<!-- Do not change this unless you understand the workings of the code and have a reason to change it. -->
<add key="MSSQLOwnerPrefix" value="[dbo]." />
<!-- *********************************************************************************** -->
<!-- ************************ End MS SQL database settings ***************************** -->
<!-- *********************************************************************************** -->
<add key="PostgreSQLConnectionString" value="Server=localhost;Port=5432;Encoding=unicode;User Id=mojouser;Password=mojo123;Database=mojoportal;CommandTimeout=120;" />
<add key="MySqlConnectionString" value="Data Source=localhost;Database=mojoportal;User ID=mojouser;Password=mojo123;Charset=utf8;" />
<add key="FirebirdConnectionString" value="Data Source=localhost;Server Type=0;Port Number=3050;Database=C:\Users\JoeAudette\devprojects\mojoportal\mojoportal.fdb;Dialect=3;Charset=UTF8;Pooling=True;Min Pool Size=0;Max Pool Size=200;Connection Timeout=10;Connection Lifetime=60;Fetch Size=200;User Id=SYSDBA;Password=masterkey" />
<add key="PostgreSQLConnectionString" value="Server=localhost;Port=5432;Encoding=unicode;User Id=mojouser;Password=${POSTGRESQL_DB_PASSWORD};Database=mojoportal;CommandTimeout=120;" />
<add key="MySqlConnectionString" value="Data Source=localhost;Database=mojoportal;User ID=mojouser;Password=${MYSQL_DB_PASSWORD};Charset=utf8;" />
<add key="FirebirdConnectionString" value="Data Source=localhost;Server Type=0;Port Number=3050;Database=C:\Users\JoeAudette\devprojects\mojoportal\mojoportal.fdb;Dialect=3;Charset=UTF8;Pooling=True;Min Pool Size=0;Max Pool Size=200;Connection Timeout=10;Connection Lifetime=60;Fetch Size=200;User Id=SYSDBA;Password=${FIREBIRD_DB_PASSWORD}" />
<add key="SqliteConnectionString" value="defaultdblocation" />
<!--
You can use a fully qualified file path as shown below, or if you are using the default
Expand Down Expand Up @@ -103,7 +103,7 @@
<!--
This file contains the RSA key used for our CryptoHelper. For best security, you should
generate your own RSA key in a different file, and then set the path to the file here.
You should do this before encrypting any data, because if you change the key you won't be
you should do this before encrypting any data, because if you change the key you won't be
able to decrypt anything that was encrypted with the previous key.
you can generate a key for .NET 4 as follows:
C:\Windows\Microsoft.NET\Framework\v4.0.30319>aspnet_regiis -pc "MyKeys" -exp
Expand All @@ -118,7 +118,7 @@
<add key="UseLegacyCryptoHelper" value="true" />
<!--
If true then when using email for sign in, on the registration page new users don't have
to choose a username. Fewer form fields to fill out may be more user friendly.
have to choose a username. Fewer form fields to fill out may be more user friendly.
-->
<add key="AutoGenerateAndHideUserNamesWhenUsingEmailForLogin" value="false" />
<!--
Expand Down