From 615f632aadfd5220f3a2c2103e88030dc524a4e0 Mon Sep 17 00:00:00 2001
From: xcbyy <2578898740@qq.com>
Date: Fri, 23 Oct 2026 16:19:30 +0800
Subject: [PATCH] =?UTF-8?q?fix(security):=20=E6=B8=85=E7=90=86=E6=B5=8B?=
 =?UTF-8?q?=E8=AF=95=E8=84=9A=E6=9C=AC=E7=A1=AC=E7=BC=96=E7=A0=81=E6=95=B0?=
 =?UTF-8?q?=E6=8D=AE=E5=BA=93=E5=AF=86=E7=A0=81=E4=B8=8E=E5=90=8E=E5=8F=B0?=
 =?UTF-8?q?=E9=BB=98=E8=AE=A4=E6=BC=94=E7=A4=BA=E5=87=AD=E8=AF=81=E9=A2=84?=
 =?UTF-8?q?=E5=A1=AB?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../src/views/login/components/login-form.vue |  6 ++---
 .../src/views/login/locale/en-US.ts           |  4 ++--
 .../src/views/login/locale/zh-CN.ts           |  4 ++--
 server/src/db/test-remote.ts                  | 22 ++++++++++---------
 4 files changed, 19 insertions(+), 17 deletions(-)

diff --git a/admin/arco-design-pro-vite/src/views/login/components/login-form.vue b/admin/arco-design-pro-vite/src/views/login/components/login-form.vue
index 2c3b21c..d61985e 100644
--- a/admin/arco-design-pro-vite/src/views/login/components/login-form.vue
+++ b/admin/arco-design-pro-vite/src/views/login/components/login-form.vue
@@ -81,9 +81,9 @@
   const userStore = useUserStore();
 
   const loginConfig = useStorage('login-config', {
-    rememberPassword: true,
-    username: 'admin', // 演示默认值
-    password: 'admin', // demo default value
+    rememberPassword: false,
+    username: '',
+    password: '',
   });
   const userInfo = reactive({
     username: loginConfig.value.username,
diff --git a/admin/arco-design-pro-vite/src/views/login/locale/en-US.ts b/admin/arco-design-pro-vite/src/views/login/locale/en-US.ts
index 81a50a4..0854786 100644
--- a/admin/arco-design-pro-vite/src/views/login/locale/en-US.ts
+++ b/admin/arco-design-pro-vite/src/views/login/locale/en-US.ts
@@ -4,8 +4,8 @@ export default {
   'login.form.password.errMsg': 'Password cannot be empty',
   'login.form.login.errMsg': 'Login error, refresh and try again',
   'login.form.login.success': 'welcome to use',
-  'login.form.userName.placeholder': 'Username: admin',
-  'login.form.password.placeholder': 'Password: admin',
+  'login.form.userName.placeholder': 'Username',
+  'login.form.password.placeholder': 'Password',
   'login.form.rememberPassword': 'Remember password',
   'login.form.forgetPassword': 'Forgot password',
   'login.form.login': 'login',
diff --git a/admin/arco-design-pro-vite/src/views/login/locale/zh-CN.ts b/admin/arco-design-pro-vite/src/views/login/locale/zh-CN.ts
index c2de7b5..699349f 100644
--- a/admin/arco-design-pro-vite/src/views/login/locale/zh-CN.ts
+++ b/admin/arco-design-pro-vite/src/views/login/locale/zh-CN.ts
@@ -4,8 +4,8 @@ export default {
   'login.form.password.errMsg': '密码不能为空',
   'login.form.login.errMsg': '登录出错，轻刷新重试',
   'login.form.login.success': '欢迎使用',
-  'login.form.userName.placeholder': '用户名：admin',
-  'login.form.password.placeholder': '密码：admin',
+  'login.form.userName.placeholder': '请输入管理员用户名',
+  'login.form.password.placeholder': '请输入管理员密码',
   'login.form.rememberPassword': '记住密码',
   'login.form.forgetPassword': '忘记密码',
   'login.form.login': '登录',
diff --git a/server/src/db/test-remote.ts b/server/src/db/test-remote.ts
index 7a2dbd9..d50a252 100644
--- a/server/src/db/test-remote.ts
+++ b/server/src/db/test-remote.ts
@@ -1,13 +1,14 @@
+import 'dotenv/config';
 import mysql from 'mysql2/promise';
 
 async function testConnection() {
-  const host = '118.184.172.94';
-  const port = 3306;
-  const user = 'peiwan';
-  const password = 'XxW7Xe5rRSckKmXm';
-  const database = 'peiwan';
+  const host = process.env.MYSQL_HOST || '127.0.0.1';
+  const port = Number(process.env.MYSQL_PORT) || 3306;
+  const user = process.env.MYSQL_USER || 'peiwan';
+  const password = process.env.MYSQL_PASSWORD || '';
+  const database = process.env.MYSQL_DATABASE || 'peiwan';
 
-  console.log(`[Remote Test] 尝试连接远程 MySQL: ${host}:${port}, 用户: ${user}, 库: ${database}`);
+  console.log(`[Remote Test] 尝试连接 MySQL: ${host}:${port}, 用户: ${user}, 库: ${database}`);
 
   try {
     const connection = await mysql.createConnection({
@@ -19,10 +20,9 @@ async function testConnection() {
       connectTimeout: 5000,
     });
 
-    console.log('[Remote Test] 恭喜，成功连接到线上远程数据库！');
+    console.log('[Remote Test] 成功连接数据库');
     const [rows]: any = await connection.query('SHOW TABLES;');
-    console.log('[Remote Test] 线上已存在的表数量:', rows.length);
-    console.log('[Remote Test] 表列表:', rows.map((r: any) => Object.values(r)[0]).join(', '));
+    console.log('[Remote Test] 表数量:', rows.length);
     await connection.end();
     return true;
   } catch (err: any) {
@@ -31,4 +31,6 @@ async function testConnection() {
   }
 }
 
-testConnection();
+if (process.env.RUN_DB_TEST === 'true') {
+  void testConnection();
+}