comments/backend/classes/secrets: Use skeleton file

2 files changed, 41 insertions, 1 deletions

diff --git a/.gitignore b/.gitignore
index cb6a427..03163af 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,5 +4,4 @@
 /public/error/error.json
 /public/error/error.html
 /bootstrap/comments/comments
-/bootstrap/comments/backend/classes/secrets.php
 AppConfig.php
diff --git a/bootstrap/comments/backend/classes/secrets.php b/bootstrap/comments/backend/classes/secrets.php
new file mode 100644
index 0000000..f584034
--- /dev/null
+++ b/bootstrap/comments/backend/classes/secrets.php
@@ -0,0 +1,41 @@
+<?php namespace HashOver;
+
+// Copyright (C) 2010-2018 Jacob Barkdull
+// This file is part of HashOver.
+//
+// I, Jacob Barkdull, hereby release this work into the public domain.
+// This applies worldwide. If this is not legally possible, I grant any
+// entity the right to use this work for any purpose, without any
+// conditions, unless such conditions are required by law.
+//
+//--------------------
+//
+// IMPORTANT NOTICE:
+//
+// To retain your settings and maintain proper functionality, when
+// downloading or otherwise upgrading to a new version of HashOver it
+// is important that you preserve this file, unless directed otherwise.
+//
+// It is also important to choose UNIQUE values for the encryption key,
+// admin name, and admin password, as not doing so puts HashOver at
+// risk of being hijacked. Allowing someone to delete comments and/or
+// edit existing comments to post spam, impersonate you or your
+// visitors in order to push some sort of agenda/propaganda, to defame
+// you or your visitors, or to imply endorsement of some product(s),
+// service(s), and/or political ideology.
+
+
+class Secrets
+{
+	// E-mail for notification of new comments
+	public $notificationEmail = 'email_username';
+
+	// Unique encryption key (case-sensitive)
+	protected $encryptionKey = 'hashover_key';
+
+	// Login name to gain admin rights (case-sensitive)
+	protected $adminName = 'hashover_admin';
+
+	// Login password to gain admin rights (case-sensitive)
+	protected $adminPassword = 'hashover_password';
+}