Scripting

14.2    Handling Settings and Passwords Correctly

Hackers are always looking for passwords for mail, FTP, and database servers. All too often, they find what they are looking for on GitHub, GitLab, and other Git hosts. That’s not because these platforms themselves are so insecure, but because code files stored there that are publicly accessible might simply contain the passwords in plain text. This vulnerability can arise if your code looks something like the following backup script:

# Attention, negative example!... codemysqldump -u root -ptopSecret wordpress > db.sqllftp -u ftpuser,topSecret2 backupserver.example.com << EOFcd remote/dir/put db.sqlbyeEOF... more code 

In this example, mysqldump first creates a backup of the database. The password ...