DEV Community

Discussion on: Stop Using .env Files Now!

Collapse
 
mcheung610 profile image
Michael Cheung

Didn’t Uber just got hack recently because they put their secret in their script?

Collapse
 
ravavyr profile image
Ravavyr

neat story:
portswigger.net/daily-swig/uber-ha...

and yea an admin screwed up, that's the point, people screw up, but that doesn't mean using environment files with secrets in them is the actual problem. Using them improperly is.

Thread Thread
 
ownupalways profile image
Oluwadipe Godwin Jesuropo

Please can you teach me the the proper way to use . env file?