Your question should be specific to WordPress. Generic PHP/JS/SQL/HTML/CSS questions might be better asked at Stack Overflow or another appropriate Stack Exchange network site. Third-party plugins and themes are off-topic for this site; they are better asked about at their developers' support routes.

Closed 3 years ago.

I wrote this simple client in javascript that uses mapbox geocoding API. It is not necessary to hide the API key but what is the correct way of giving that js file access to the API key without hardcoding it?

Is it a good solution to embed the API key in the html file in a hidden div and have js read it from that div?

Your question should be specific to WordPress. Generic PHP/JS/SQL/HTML/CSS questions might be better asked at Stack Overflow or another appropriate Stack Exchange network site. Third-party plugins and themes are off-topic for this site; they are better asked about at their developers' support routes.

Closed 3 years ago.

I wrote this simple client in javascript that uses mapbox geocoding API. It is not necessary to hide the API key but what is the correct way of giving that js file access to the API key without hardcoding it?

Is it a good solution to embed the API key in the html file in a hidden div and have js read it from that div?

• plugins
• database
• api

1 Answer 1

Assuming you are using wp_enqueue_script to load the .js, then use wp_localize_script to set the value of your key.

Another option is to use wp_add_inline_script instead of wp_localize_script.