WordPress for Developers
API Key Environment Variable in PHP: Where It Goes
Learn where a PHP API key environment variable should live, how to read it safely, and every place it must never end up: git,…
Browse the archive
Tag: API Key Security
WordPress for Developers
Call OpenAI API From PHP Without an SDK
Call the OpenAI API from PHP using cURL and JSON, with secure API key storage, WordPress plugin integration, response handling, and HTTP error checks.
WordPress for Developers
Exponential Backoff Jitter API Retries That Work
Exponential backoff jitter API retries stop retry storms when LLM calls fail together. See jitter formulas, PHP code and which errors are safe to…
AI Coding Assistants
Add an LLM to a Web Application You Have to Maintain
Your LLM call works in a test script. Production needs a server-side proxy, timeouts, retries that tell a rate limit from a spend cap,…
AI Coding Assistants
Constraining What an AI Agent Can Touch in Your Repo
How to keep an AI coding agent away from config files, secrets and lockfiles, what an ignore file actually guarantees, and what it does…
AI Coding Assistants
AI Coding Assistants and Your API Keys: A Security Checklist
AI assistants read your whole workspace, .env files included. Here is what to exclude, what to rotate, and how to tell if a key…