diff --git a/api.php b/api.php
index 49253f7..7ffc3e0 100644
--- a/api.php
+++ b/api.php
@@ -10,10 +10,10 @@ header("Access-Control-Allow-Headers: Content-Type");
 if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') { http_response_code(200); exit(); }
 
 // ── KONFIGURASI ──────────────────────────────────────────────
-$host     = "localhost";
+$host     = "tocg40440408gocww0c8osgc";
 $dbname   = "default";
-$username = "root";
-$password = "";
+$username = "mysql";
+$password = "sjQiQ0OnycL1bhCEzywCfN41cWHGFmBzQXiEr0P3RiMrFlq3pvI2lowKRDDmOhAN";
 
 try {
     $pdo = new PDO("mysql:host=$host;dbname=$dbname;charset=utf8mb4", $username, $password);
diff --git a/index.php b/index.php
index 50fd3c0..0d1f3da 100644
--- a/index.php
+++ b/index.php
@@ -600,7 +600,7 @@ $idIbadah  = $_SESSION['id_ibadah'] ?? null;
 // ════════════════════════════════════════════════════════════════
 //  CONFIG
 // ════════════════════════════════════════════════════════════════
-const API = 'http://localhost/web_gis/01/api.php';
+const API = '/api.php';
 const USER_ROLE = '<?= $role ?>';
 const USER_ID_IBADAH = <?= $idIbadah ?? 'null' ?>;
 
@@ -1341,8 +1341,8 @@ function shakeEl(id) {
 // ════════════════════════════════════════════════════════════════
 //  MODAL DETAIL — buka dari popup atau sidebar
 // ════════════════════════════════════════════════════════════════
-const UPLOAD_URL = 'http://localhost/web_gis/01/upload.php';
-const FOTO_BASE  = 'http://localhost/web_gis/01/uploads/';
+const UPLOAD_URL = '/upload.php';
+const FOTO_BASE  = '/uploads/';
 
 let detailMiskinId = null; // ID KK yang sedang dibuka di modal detail
 
diff --git a/login.php b/login.php
index 159650f..27e57e0 100644
--- a/login.php
+++ b/login.php
@@ -1,7 +1,11 @@
 <?php
 session_start();
 if ($_SERVER['REQUEST_METHOD'] === 'POST') {
-    $pdo = new PDO("mysql:host=localhost;dbname=default;charset=utf8mb4", "root", "");
+    $pdo = new PDO(
+      "mysql:host=tocg40440408gocww0c8osgc;port=3306;dbname=default;charset=utf8mb4",
+      "mysql",
+      "sjQiQ0OnycL1bhCEzywCfN41cWHGFmBzQXiEr0P3RiMrFlq3pvI2lowKRDDmOhAN"
+    );
     $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
 
     $username = trim($_POST['username'] ?? '');
diff --git a/upload.php b/upload.php
index 2cd21ef..139f236 100644
--- a/upload.php
+++ b/upload.php
@@ -14,7 +14,7 @@ if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
 
 // ── KONFIGURASI ──────────────────────────────────────────────
 $uploadDir  = __DIR__ . '/uploads/';
-$uploadUrl  = 'http://localhost/web_gis/01/uploads/';
+$uploadUrl  = '/uploads/';
 $maxSize    = 5 * 1024 * 1024; // 5 MB
 $allowedExt = ['jpg', 'jpeg', 'png', 'webp'];
 
@@ -86,10 +86,10 @@ if (!move_uploaded_file($_FILES['foto']['tmp_name'], $destPath)) {
 }
 
 // ── UPDATE DATABASE ──────────────────────────────────────────
-$host     = "localhost";
+$host     = "tocg40440408gocww0c8osgc";
 $dbname   = "default";
-$username = "root";
-$password = "";
+$username = "mysql";
+$password = "sjQiQ0OnycL1bhCEzywCfN41cWHGFmBzQXiEr0P3RiMrFlq3pvI2lowKRDDmOhAN";
 
 try {
     $pdo = new PDO("mysql:host=$host;dbname=$dbname;charset=utf8mb4", $username, $password);