Playing devil's advocate here, doesn't having your database password available in /app/config/database.php carry the same risk?
On Aug 18, 4:58 pm, "[email protected]" <[email protected]> wrote: > I'm not really sure what you mean about paypal generating API keys, > the ones they give you when you sign up for an api account don't > change as far as I know. What's the usual way of keeping these things > secure? > > thanks for the help > Sarah -- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions. To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/cake-php
