Move db.php secrets out of webroot; switch to universal Square account

db.php: replace with a require shim pointing to db-secrets.php outside
public_html (DB password, admin hash, CyberMail key, Square token were all
sitting in a web-reachable file, only protected by .htaccess).

index.html: update the Web Payments SDK App ID/Location ID to the new
unified Square account shared with tomtomgames.com and tomsjavajive.com.
This commit is contained in:
Myron Blair
2026-07-05 15:46:25 +00:00
parent ffebe87210
commit 3bf7fe7620
2 changed files with 2 additions and 116 deletions
+1 -1
View File
@@ -1104,7 +1104,7 @@
const cardEl = document.getElementById('card-container');
if (cardEl) cardEl.style.display = '';
try {
const payments = Square.payments('sq0idp-YSM7BU9IVyOWSzpeP-0nzQ', 'L8GZYHYKE95CE');
const payments = Square.payments('sq0idp-UnXYsN5U7ba8F8C9LfY5ZA', 'LW7MNGFP44QZZ');
squareCard = await payments.card({
style: {
'.input-container': { borderColor: 'rgba(255,255,255,0.12)', borderRadius: '6px' },