Stripe api keys

Viewing 22 posts - 1 through 22 (of 22 total)
  • Author
    Posts
  • #568757

    giannis
    Participant

    Hi on my website katerinastudio.com i have put to pay with stripe and if you go on the source code of the page or Ctrl + U on windows the api keys from stripe it appears. Is this normal? Sould be more secure? Thanks I send an screenshot

    #568759

    giannis
    Participant
    This reply has been marked as private.
    #569415

    giannis
    Participant

    Stripe Support told me this

    Hi there,

    That said, I’ll be happy to help out! If you’re currently referring to our sample API codes in our API references or any Stripe documents that has the sample API code snippets then yes, it’s normal for the public key to appear. However, this shouldn’t apply to secret keys. The secret key shouldn’t be seen anywhere in our Stripe documents or API references. That should remain hidden because that’s your personal key.

    Secret API keys should be kept confidential and only stored on your own servers. Your account’s secret API key can perform any API request to Stripe without restriction [0].

    I hope this clarifies, let me know if you have any additional questions.

    Best regards,
    Mary May

    #569507

    anna_thimpress
    Participant

      Hi,

      Can you give me your wp-admin, using access information?

      I’ll help you check it.

      Look forward to hearing from you.

      #569786

      giannis
      Participant
      This reply has been marked as private.
      #569844

      giannis
      Participant

      And cause the secret api key is exposed someone can took do a intergration and make payments from me to him. Any suggestion how to hide or help me pls its importand.

      #570380

      anna_thimpress
      Participant

        Hi,

        I assigned this issue to our developer and will give you a solution soon.

        #570413

        giannis
        Participant

        ok thanks cause is a big issue i think for some random see my epi keys and took money from stripe or accept random transactions and not be from my website. thanks.

        #571125

        anna_thimpress
        Participant

          Hi,

          Our developer is checking it and will give you a solution soon.

          #573923

          giannis
          Participant

          Hi
          Any news from the developer?
          Thanks

          #574361

          anna_thimpress
          Participant

            Hi,

            we need more time to check it.

            Really sorry for this delay.

            #577081

            giannis
            Participant

            Hi

            Any news?

            Thanks

            #578107

            Isaac Lewis
            Keymaster

            Hi giannis,

            Please send us an FTP account, we’ll fix your site.

            Thanks.

            #578177

            giannis
            Participant

            Hi

            Do you need ftp or you fix it cause i see some changes.

            Thanks.

            And if i send ftp do i need to make it like Set as private reply?

            #578207

            giannis
            Participant
            This reply has been marked as private.
            #578318

            giannis
            Participant

            Hi do you fix it? Can i disable the test mode?
            And one more question why delete the plugin stripe from wordpress. What this mean?Is no longer supported or put new one?
            Thanks

            #578398

            giannis
            Participant

            And i see on the Autoptimize Settings plugin you disable Optimize JavaScript Code can i enable?

            #578418

            Isaac Lewis
            Keymaster

            Hi giannis,

            We fixed that for your site, please check it.

            And i see on the Autoptimize Settings plugin you disable Optimize JavaScript Code can i enable?

            – Yes, you can

            Thanks.

            #578505

            giannis
            Participant

            Ok thanks it works the seckret api key is hidden.Thanks

            One more think why the stripe plugin is deleted from wordpress site what this mean?

            #579212

            Isaac Lewis
            Keymaster

            Hi,

            One more think why the stripe plugin is deleted from wordpress site what this mean?
            – We are close plugin temporary to update security about stipe key like your site. We’ll publish again soon

            Thanks.

            #579627

            giannis
            Participant

            And just to remind you The stripe put new EU regulations and i ask the support what i need to do and answer me this:

            If your integration relies on a plugin to create charges you might need to make changes in order to remain compliant with upcoming EU regulations. Ultimately, this depends on the developers that created the software. We have compiled a list of known Stripe integrations and information around their readiness, along with their relative documentation here:

            https://stripe.com/partners/sca-ready

            If your plugin is not listed or is noted as not ready, I would suggest contacting them as soon as possible to ensure that they are updating their integration in preparation for these regulations.

            Any update or somethink?
            You can close the ticket.

            Thanks

            #580247

            Isaac Lewis
            Keymaster

            Hi giannis,

            Yes, we’ll contact them if possible.

            Thanks.

          Viewing 22 posts - 1 through 22 (of 22 total)

          You must be logged in to reply to this topic. You can click here