Fix DB password --- which is going to need to change ASAP anyway....
Remove hardcoded passwords (and change the ones on the actual server)