search

BekmurodGofurov / aiogram-3x

this for learn
0 stars 0 forks source link

api leak #1

Open ahrorbeksoft opened 2 months ago

ahrorbeksoft commented 2 months ago

you should never hardcode your api keys and other sensitive data. you can use environment variables instead of putting them inside your code

BekmurodGofurov commented 2 months ago

@ahrorbeksoft ok sir i will fix it. Thanks for your comment

BekmurodGofurov commented 2 months ago

@ahrorbeksoft Now you can see that I used .env file to save my token and id. Thank you again for spotting my mistake

ahrorbeksoft commented 1 month ago

now you should put ".env" into the .gitignore file so when you push your code to the github it will not upload your api keys. and you can create and .env-example file to show what variables people should have