{"action":"opened","issue":{"url":"https://api.github.com/repos/getgrav/grav-plugin-login/issues/16","labels_url":"https://api.github.com/repos/getgrav/grav-plugin-login/issues/16/labels{/name}","comments_url":"https://api.github.com/repos/getgrav/grav-plugin-login/issues/16/comments","events_url":"https://api.github.com/repos/getgrav/grav-plugin-login/issues/16/events","html_url":"https://github.com/getgrav/grav-plugin-login/issues/16","id":119150322,"number":16,"title":"It is safe to commit the password?","user":{"login":"gagarine","id":164074,"avatar_url":"https://avatars.githubusercontent.com/u/164074?v=3","gravatar_id":"","url":"https://api.github.com/users/gagarine","html_url":"https://github.com/gagarine","followers_url":"https://api.github.com/users/gagarine/followers","following_url":"https://api.github.com/users/gagarine/following{/other_user}","gists_url":"https://api.github.com/users/gagarine/gists{/gist_id}","starred_url":"https://api.github.com/users/gagarine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gagarine/subscriptions","organizations_url":"https://api.github.com/users/gagarine/orgs","repos_url":"https://api.github.com/users/gagarine/repos","events_url":"https://api.github.com/users/gagarine/events{/privacy}","received_events_url":"https://api.github.com/users/gagarine/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-11-27T08:19:38Z","updated_at":"2015-11-27T08:19:38Z","closed_at":null,"body":"Right now their is no gitignore for the account's config file. That mean it's very easy to commit them by mistake and publicly publish password (encrypted) and account information.\r\n\r\nI didn't check your code but I guess you are using strong password encryption that is hard to break (not like md5) so it's should not be a problem. But still, I'm not sure it's a good idea to let peoples commit those files by default. Do you feel comfortable with that?\r\n\r\nIf you feel comfortable to commit those files, I think a short comment in the file explaining it's not a risk to commit those file would be a nice helper.\r\n\r\n(I'm very new to grav)"}}