.data Security Question

Glitch Help
#1

Hi, all! This is my first post on the Glitch forums, so if I screwed something up, please let me know.

I have a simple question: can I reliably use a .data folder to store sensitive configuration files? I’m only asking this because I haven’t been able to get .env to reliably work.

2 Likes
#2

Yes!

What happened? We can probably help.

4 Likes
#3

If you think it is a code issue, look below. If it is not that, feel free to ask!
Step 1: refresh your application. Run the refresh command in your project terminal.
Step 2: Use one of the usage examples to get the env var:
JavaScript:

var env_var = process.env.ENV_VAR_YOU_WANT_TO_GET

Python (not really good at it, sorry)

import os
os.getenv('ENV_VAR_YOU_WANT_TO_GET')

PHP:

<?php 
$ENV_VAR = $_ENV["ENV_VAR_YOU_WANT_TO_GET"]
?>
#4

@beckettnormington just so you know you can only access env vars with node.js and sending a GET request to a slug that begins in a . (we are using .data) will return Forbidden.

#5

You would have to get a package to make this work, but this is the idea.

1 Like
#6

not always, the lamp-poc project doesn’t hide all dot directories. Make sure to keep that in mind for security

#8

do you maybe have spaces around the = signs in .env?

#9

what was the slug for logs in apache (lamp-poc) that @RiversideRocks found the bug?

#10

/.apache2/log/access.log

And I wouldn’t really call it a slug, its a file.

#11

Hey, I just wanna say, the Solution button is for marking which answer solved your problem which lets other people with the same problem find the answer easily without having to search through a bunch of conversation. It looks like you didn’t find your answer yet and people might think you already have and won’t attempt to help you.

3 Likes
#12

No, I do not.

#13

Oh, oops. My apologies.

1 Like
#14

Thanks for the answer; it solved my issue with the .env variables.

1 Like
#15

@aboutDavid, we are quite obviously trying to help him:

.data Security Question - #6 by javaarchive

#16

Other people? Like you don’t always know the answer so other people.

#17

I linked javaarchives post.

#18

But where in this post did you link it?

779×382

Also, I say things for the future as well, Not everyone knows how to use the forum and @beckettnormington is new to the forums so I explained the solution button?

1 Like