PHP Hardcoded Credential Cleaner

clean-creds.sh

#!/usr/bin/env bash

pword=$1
shift

while [ $1 ]
do
    # NOTE: Make sure to add .db-password to Git Ignore AND HT Access
    sed -i -E "s/\"${pword}\"/file_get_contents\(\".db-password\"\)/" $1
    shift
done

Makefile

main: install

install:
	sudo cp ./clean-creds.sh /usr/bin/clean-creds
	sudo chmod 777 /usr/bin/clean-creds

git filter-branch --tree-filter 'script.sh PASSWORD FILES' HEAD

(typical usage for cleaning credentials out of entire commit history)