dscqrkvr9562034621 2013-02-13 19:56
浏览 43
已采纳

如何安全地允许用户在Wordpress插件中输入外部应用程序API密钥?

I'm creating a Wordpress plugin that will allow a custom button to be displayed on the page.

I've got it working with a simple HTML dump through the Wordpress shortcode method. Here's the problem I'm facing: I want the user to be able to customize the button's name, amount, and other parameters. This could all be done through shortcode which will send paramaters to our site's external API and generate the button. However, I also need to let them hook up their button using their API key from our service. This can't be stored in plaintext somewhere because it could be used maliciously if compromised. Is there a good way to let the user enter sensitive info like this but not store it in plain text?

  • 写回答

1条回答 默认 最新

  • dovhpmnm31216 2013-02-13 20:15
    关注

    I would make use of wordpress' built in functions for handling passwords.

    http://codex.wordpress.org/Function_Reference/wp_hash_password

    If you already have a plugin page where the user can configure your plugin, that would be a good place to have an input for them to enter their api key. When they save the settings you can run the hashing function and then store the hash in the database.

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?