I'm creating a Wordpress plugin that will allow a custom button to be displayed on the page.
I've got it working with a simple HTML dump through the Wordpress shortcode method. Here's the problem I'm facing: I want the user to be able to customize the button's name, amount, and other parameters. This could all be done through shortcode which will send paramaters to our site's external API and generate the button. However, I also need to let them hook up their button using their API key from our service. This can't be stored in plaintext somewhere because it could be used maliciously if compromised. Is there a good way to let the user enter sensitive info like this but not store it in plain text?
