Where is the best place to put sensible data in Symfony2, i.e. PayPal Variables (API Username, Password etc.)?
Since app/config/ is not accessible from outside, I think this might actually be the best location. Am I correct?
If above is correct, can I add an additional paypalconfig.yml file to the app/config/ folder or is it recommend to add those things to app/config/parameters.ini?
How can I access that data later?
Thanks!
Yes, app/config is safe as long as server is setup correctly.
You could create paypalconfig.yml, but it’s recommended to store in /app/config/parameters.ini
You can access it later on as DIC parameter, for example in controller:
$this->container->getParameter("my_private_paypal_param");