Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Obfusate, encrypt, protect API key within WP dashboard #191

Open
martymi opened this issue Oct 17, 2024 · 0 comments
Open

Obfusate, encrypt, protect API key within WP dashboard #191

martymi opened this issue Oct 17, 2024 · 0 comments

Comments

@martymi
Copy link

martymi commented Oct 17, 2024

The plugin settings at /wp-admin/options-general.php?page=mailgun holds a field for the mailgun API key. From using the plugin it appears the key is not obfuscated or encrypted, meaning if someone has access to the settings page they can see and appropriate the key.

Beyond API keys, perhaps oauth or similar authorization protocols could be used in the future for additional security.

Thanks for the consideration!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant