如何隐藏开发人员的敏感数据

Question

I'm wondering how we could hide sensitive data (databases passwords and other passwords) from some developers for our PHP projects. We are using Subversion for our projects. Is it enough to just disallow some users to access the folders where we have the files with the passwords? Any other suggestions?

Answer 1

1. Do not store sensitive data in any code versioning system. Keep the variables empty.
2. After first checkout, set the variables locally.
3. In case of distributed/remote databases, simply create another access for that user to access that database and provide credentials.
4. Once you set the values, exclude these files from being updated later.