If I have a php file that contains my twitter access and consumer keys and secrets in plain text, isn’t it possible that somebody can just download that php file using, for example, wget, read the file and then know my twitter login keys? How would I protect against this?
Share
For one, store these files off the document root, and two, no, if you server is setup properly clients can never get the source code of a PHP file.