From 7803521fce2b1199ab358500de00e0ca6163a1ef Mon Sep 17 00:00:00 2001
From: Ganesh Patil <7030871503ganeshpatil@gmail.com>
Date: Sat, 14 Feb 2026 13:21:33 +0530
Subject: [PATCH] security: remove API key logging from wrapper scripts (fixes
 #263)

---
 demo/cwrap.py | 3 +--
 demo/pwrap.py | 1 -
 ratc/cwrap.py | 3 +--
 ratc/pwrap.py | 1 -
 4 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/demo/cwrap.py b/demo/cwrap.py
index b8cfb4b6..f9f33e59 100644
--- a/demo/cwrap.py
+++ b/demo/cwrap.py
@@ -58,7 +58,6 @@
     except:
         init_simtime_ym = "[0.0, 0.0, 0.0]"
 
-print(apikey)
 print(yuyu)
 print(name1+'='+init_simtime_u)
 print(name2+'='+init_simtime_ym)
@@ -83,7 +82,7 @@
         u = concore.read(1,name1,init_simtime_u)
     f = {'file1': open(concore.inpath+'1/'+name1, 'rb')}
     print("CW: before post u="+str(u))
-    print('http://www.controlcore.org/pm/'+yuyu+apikey+'&fetch='+name2)
+    print('http://www.controlcore.org/pm/'+yuyu+'<APIKEY_HIDDEN>'+'&fetch='+name2)
     r = requests.post('http://www.controlcore.org/pm/'+yuyu+apikey+'&fetch='+name2, files=f,timeout=timeout_max)
     if r.status_code!=200:
         print("bad POST request "+str(r.status_code))
diff --git a/demo/pwrap.py b/demo/pwrap.py
index beb90116..283ca0ce 100644
--- a/demo/pwrap.py
+++ b/demo/pwrap.py
@@ -61,7 +61,6 @@
     except:
         init_simtime_ym = "[0.0, 0.0, 0.0]"
 
-print(apikey)
 print(yuyu)
 print(name1+'='+init_simtime_u)
 print(name2+'='+init_simtime_ym)
diff --git a/ratc/cwrap.py b/ratc/cwrap.py
index b8cfb4b6..f9f33e59 100644
--- a/ratc/cwrap.py
+++ b/ratc/cwrap.py
@@ -58,7 +58,6 @@
     except:
         init_simtime_ym = "[0.0, 0.0, 0.0]"
 
-print(apikey)
 print(yuyu)
 print(name1+'='+init_simtime_u)
 print(name2+'='+init_simtime_ym)
@@ -83,7 +82,7 @@
         u = concore.read(1,name1,init_simtime_u)
     f = {'file1': open(concore.inpath+'1/'+name1, 'rb')}
     print("CW: before post u="+str(u))
-    print('http://www.controlcore.org/pm/'+yuyu+apikey+'&fetch='+name2)
+    print('http://www.controlcore.org/pm/'+yuyu+'<APIKEY_HIDDEN>'+'&fetch='+name2)
     r = requests.post('http://www.controlcore.org/pm/'+yuyu+apikey+'&fetch='+name2, files=f,timeout=timeout_max)
     if r.status_code!=200:
         print("bad POST request "+str(r.status_code))
diff --git a/ratc/pwrap.py b/ratc/pwrap.py
index beb90116..283ca0ce 100644
--- a/ratc/pwrap.py
+++ b/ratc/pwrap.py
@@ -61,7 +61,6 @@
     except:
         init_simtime_ym = "[0.0, 0.0, 0.0]"
 
-print(apikey)
 print(yuyu)
 print(name1+'='+init_simtime_u)
 print(name2+'='+init_simtime_ym)