mirror of
https://github.com/codeguy/php-the-right-way.git
synced 2025-08-13 17:23:58 +02:00
Merge pull request #610 from carnage/patch-1
Added avoid committing sensitive info to source control
This commit is contained in:
@@ -13,4 +13,5 @@ via the file system.
|
|||||||
- If you must store your configuration files in the document root, name the files with a `.php` extension. This ensures
|
- If you must store your configuration files in the document root, name the files with a `.php` extension. This ensures
|
||||||
that, even if the script is accessed directly, it will not be output as plain text.
|
that, even if the script is accessed directly, it will not be output as plain text.
|
||||||
- Information in configuration files should be protected accordingly, either through encryption or group/user file
|
- Information in configuration files should be protected accordingly, either through encryption or group/user file
|
||||||
system permissions
|
system permissions.
|
||||||
|
- It is a good idea to ensure that you do not commit configuration files containing sensitive information eg passwords or API tokens to source control.
|
||||||
|
Reference in New Issue
Block a user