Title: api_key leak
Last modified: January 9, 2022

---

# api_key leak

 *  Resolved [Ov3rfly](https://wordpress.org/support/users/ov3rfly/)
 * (@ov3rfly)
 * [4 years, 5 months ago](https://wordpress.org/support/topic/api_key-leak/)
 * The `$api_key` is always sent to error_log without conditions in these files:
    - admin/utils/class-indexnow-url-submission-admin-utils.php line 117
    - includes/class-indexnow-url-submission-activator.php line 25
 *     ```
       error_log($api_key);
       ```
   
 * Suggested fix, add `WP_DEBUG` checks similar to other `error_log()` calls in 
   plugin or better remove leak of `$api_key` to error_log completely.
 * IndexNow Plugin 1.0.0

Viewing 1 replies (of 1 total)

 *  Plugin Author [bingwebmastertools](https://wordpress.org/support/users/bingwebmastertools/)
 * (@bingwebmastertools)
 * [4 years, 5 months ago](https://wordpress.org/support/topic/api_key-leak/#post-15235728)
 * Thanks [@ov3rfly](https://wordpress.org/support/users/ov3rfly/) for pointing 
   this out. We have fixed the issue and released version 1.0.1.

Viewing 1 replies (of 1 total)

The topic ‘api_key leak’ is closed to new replies.

 * ![](https://ps.w.org/indexnow/assets/icon-256x256.png?rev=2646601)
 * [IndexNow Plugin](https://wordpress.org/plugins/indexnow/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/indexnow/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/indexnow/)
 * [Active Topics](https://wordpress.org/support/plugin/indexnow/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/indexnow/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/indexnow/reviews/)

## Tags

 * [leak](https://wordpress.org/support/topic-tag/leak/)

 * 1 reply
 * 2 participants
 * Last reply from: [bingwebmastertools](https://wordpress.org/support/users/bingwebmastertools/)
 * Last activity: [4 years, 5 months ago](https://wordpress.org/support/topic/api_key-leak/#post-15235728)
 * Status: resolved