Properly encrypt API keys and SMTP passwords
-
Hello!
I just noticed you are using base64 encoding for API keys and SMTP passwords. This is very insecure.
Please consider using a proper encryption method.
You can check this article from Felix Arntz, one of the developers of Google SiteKit, on how this can be achieved:
https://felix-arntz.me/blog/storing-confidential-data-in-wordpress
Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)
You must be logged in to reply to this topic.