python - Security question relating to executing server-side script -
i've written python script using selenium imitate browser logging in , buying stuff website. therefore, python script contains log-in information along payment information (checking account info, etc). if configure apache webserver able execute python scripts, when client presses button runs purchasing script, there anyway client see contents of python script (thereby gaining access sensitive login , payment info)?
i remember reading if error occurs, script show in plain text in browser? should prevent using try , except blocks or there better method i'm not aware of?
thanks in advance.
it idea put such information in external config file can't served webserver directly , read file in script. in case of configuration error client might see sourcecode not sensitive information
Comments
Post a Comment