# CRITICAL — New Secrets from MySQL Stored Procedures
# Date: 2026-09-23

## Found by checking information_schema.routines — stored procedures!

### 1. Shopee API — MULTIPLE accounts!

| Outlet | PartnerID | ShopID | APIKey |
|--------|-----------|--------|--------|
| 003 | 2001660 | 471736341 | fcd119458b4d9b5394f131aecfa5e16bbc8e30ae24cf28bf5a556f68b5cf411f |
| 0FX | 845612 | 252313100 | bec4b0da11dd07a2f2f0529767dcbb61661f9935298ced40e0201c3aef4036a8 |
| 0S3 | 846183 | 261555403 | MGVmZDkzZDc1MDA0NjAyZmQ4MDc3YWU0MjBkMDcwNmI5YzFiMjkyZDc3NDViZGY5NWViZjJhN2Jk (base64) |
| 0TJ | 845879 | 263769040 | YzMwZGRhYmRmNWQzZDUzZmU0ZDAzYmI1YjIwMGYxMjE2MTI4N2NlOTI2NTVlNDYyNjViYmM5OGVj (base64) |
| 1BB | 846291 | 277276187 | MTY4YjVhNTFhMGRmYzk5ZTlhMmQ3OWIwNmY3ZTU4ZmQ2ZjFkZDJiYTllNjNhNGQwMTg5MWI1ZTll (base64) |
| refund.zip | 844098 | 175375997 | f4786d228ff53ae6090f3f735b32402a12d11988c8d8fdcc75aca0a5522ef750 |

### 2. Lazada API Keys!

| Outlet | appkey | secretkey | token |
|--------|--------|-----------|-------|
| 001 | 102142 | ux6myyw4BIPjXkwqJaCQusK0VLHxsgfQ | 50000601725i1JjqbrSc7GcRCmRyDlivH4msS19abe650kc4GqrExS2ulbPFm8KJ |
| 001 | 104831 | 4tR8TZrKyUnRWJfKNB7GpPLrHOcyx37X | 50000701e12qWyccT4p0WfFE1b5637a5JK0iSUog4EqOCtsYwLmV2hQc8NH04M |

### 3. Payment Gateway
| MerchantId | Name | TransactionPassword |
|------------|------|---------------------|
| 00080091009147789397901 | PHARMANET B2B | Qtidf3DN |

### 4. Kredivo Server Keys
| Division | ServerKey | Active |
|----------|-----------|--------|
| 2 | 0b37029f7da6596953dbdaeb525283db | Y |
| 5 | d598d725d8c6c37d07adea334e8de0a7 | Y |
| 6 | 48cc64304ea57e9155de5eec2a628115d | Y |
| 13 | 48cc64304ea57e9155de5eec2a628115d | Y |
| 15 | d598d725d8c6c37d07aedea334e8de0a7 | Y |

### 5. MSSQL Passphrase
`Jaya terus PT Pharos Indonesia!`
Used in SPAppLogin for DECRYPTBYPASSPHRASE (passwords corrupted during migration)

### 6. Plaintext Passwords — NEW

| DB | Username | Password | Source |
|----|----------|----------|--------|
| CenturyMaster | ADMIN | ADMIN | M_AppUser |
| CenturyMaster | Karin | Cindy123 | M_AppUser |
| CenturyMaster | asd | Cindy123 | M_AppUser |
| master | ClarissaK (NIP=12345678) | Hello12345! | voluspa_login |
| master | Clarissa2 (NIP=P1222222) | Hello123! | voluspa_login |

### 7. Refresh Token
UserID=7: 5f497399492b2f0b065817079e8268edf8b4e0b6647ba10c57fe72ffed481681

### 8. Internal URLs discovered
- http://pharmanet.apodoc.id/ — internal API
- http://prog2.pharmanet.id/ANDROID/upload/pelapak/ — upload endpoint
- https://api.pharmanet.id/PRODUCT_PHOTO/ — product photos
- /home/filindo/shopee/jsonData/ — internal path on server

### 9. Tokopedia API (confirmed from data_api_tokopedia)
- ClientSecret: b94d8e39fc1446f7bd2a46c35e30dd7e (12 accounts)
- FSID: 13453
- IP whitelist required

### 10. Shopee v2 tokens (token_shopee_v2)
- Test data only (expired 2021)