What part of the project (the Internet store on Kohana) cannot be uploaded to the public repository in terms of security?

Question

Kohana

Hello! I want to upload my online store to github to show my code as a portfolio. What part can not be flooded (bad for security)? It is clear that the config with the login and password for the database, the config with the password from Email. And what is better not to flood?
The store is written in Kohana.

Answer 1

You wrote everything correctly. If you put config files (database access, salt to create user passwords, etc.) in .gitignore , then your project cannot be run on the local machine. I would advise to create 2 dev and prod configs. I would add the latter to .gitignore, and leave dev with standard local database access (localhost, root, root). It is also worth writing in Readme.md the environment to run your application (php7. 1, MySQL 5.6, etc.)