wordpress-plugin icon indicating copy to clipboard operation
wordpress-plugin copied to clipboard

Obfusate, encrypt, protect API key within WP dashboard

Open martymi opened this issue 1 year ago • 0 comments

The plugin settings at /wp-admin/options-general.php?page=mailgun holds a field for the mailgun API key. From using the plugin it appears the key is not obfuscated or encrypted, meaning if someone has access to the settings page they can see and appropriate the key.

Beyond API keys, perhaps oauth or similar authorization protocols could be used in the future for additional security.

Thanks for the consideration!

martymi avatar Oct 17 '24 23:10 martymi