- App is hosted on a shared server (hosting provider can see config files if they want to).
- App must use an API key of a 3rd party service.
Considering this "tight budget" scenario, would it be better to enter the API key every login and store it in a session variable instead of storing it hard-coded (e.g., inside
config.php)? Or what are better ways to store 3rd party API keys inside your software?