From 07ab31dc06b3071af7cd6e5c8a88f2507ac109ee Mon Sep 17 00:00:00 2001
From: ilotterytea <iltsu@alright.party>
Date: Thu, 11 Dec 2025 00:31:46 +0500
Subject: fix: hide secret in configuration

---
 system/config.php | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/system/config.php b/system/config.php
index e03e95b..4a1a9da 100644
--- a/system/config.php
+++ b/system/config.php
@@ -25,6 +25,10 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
     }
 
     foreach ($_POST as $k => $v) {
+        if ($v == '****') {
+            continue;
+        }
+
         $parts = explode('_', $k);
         $part_count = count($parts);
         if ($part_count != 2) {
@@ -70,6 +74,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
     <div class="container">
         <div class="wrapper">
             <?php html_navigation_bar() ?>
+            <?php display_alert(); ?>
             <section class="content">
                 <h1>Instance configuration</h1>
                 <?php if (!file_exists(CFG_PATH)): ?>
@@ -112,8 +117,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
                                 </tr>
                                 <tr>
                                     <th>Password</th>
-                                    <td><input type="password" name="database_pass"
-                                            value="<?= CONFIG['database']['pass'] ?>" required></td>
+                                    <td><input type="password" name="database_pass" value="****" required></td>
                                 </tr>
                                 <tr>
                                     <th>Host</th>
@@ -284,8 +288,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
                                 </tr>
                                 <tr>
                                     <th>Client secret</th>
-                                    <td><input type="password" name="twitch_clientsecret"
-                                            value="<?= CONFIG['twitch']['clientsecret'] ?>">
+                                    <td><input type="password" name="twitch_clientsecret" value="****">
                                     </td>
                                 </tr>
                                 <tr>
-- 
cgit v1.2.3