I'm creating an online marketplace using EasyDigitialDownloads and I also have a developer helping to customize the site. The issue I have is that the developer will be able to see my API key that I have to plug into EDD in order to activate paypal. I feel like this is a security issue despite the fact the developer will not have my paypal password. This is the first site I have created and I'm wondering if this is a common issue. Just how important is keeping the API credentials completely secret? Thanks in advance, this issue has got me stuck.
... View more