使用wget下载具有登录详细信息的php

Question

If I have a php file that contains my twitter access and consumer keys and secrets in plain text, isn't it possible that somebody can just download that php file using, for example, wget, read the file and then know my twitter login keys? How would I protect against this?

Answer 1

第一种，将这些文件存储在文档根目录之外，第二种，否，如果服务器设置正确，则客户端永远无法获取PHP文件的源代码。