Telegram-Weather-Bot icon indicating copy to clipboard operation
Telegram-Weather-Bot copied to clipboard

Published 20 hours ago • verified publisher icon mustafababil

Telegram TOKEN visible

Open mattura opened this issue 7 years ago • 1 comments

Your Telegram TOKEN and openweathermap.org API key are published on github (responseController.py).

It would be a good idea to remove these (replace with YOUR-TOKEN-HERE or similar), or somebody could hijack your bot.

mattura avatar Jun 18 '18 09:06 mattura

BUMP

Anyone can take over this bot. (I haven't checked, maybe they already have).

You should use a .env file to store your environment variables. (import dotenv library, and use loadenv() to load the file. Then load the variable with os.getenv('TOKEN'), for example. Then add .env to .gitignore.)

TheSecurityDev avatar Aug 17 '21 20:08 TheSecurityDev