search

rainlab / mailchimp-plugin

Provides MailChimp integration services
MIT License
11 stars 16 forks source link

Don't store API key in the component settings #1

Closed daftspunk closed 8 years ago

daftspunk commented 10 years ago

It's not the smartest idea to store the Mailchimp API key in the Component settings area. This file might be compromised.

The API key should be stored in the database or at least in an encrypted format.

alekseybobkov commented 10 years ago

Yes, the DB is the appropriate place. The same goes for any credentials. Perhaps we should extend the Settings API with the column encryption feature.

daftspunk commented 8 years ago

This is complete, Settings model is now used.