Added note function and fixed db credential vuln