anyone can fork your replit and take your api key and auth information, so i did that and made my own website to spam the firebase with whatever i want xD

thats why you shoudln’t store keys in plain text :P lol

(seriously though, make sure to reset and hide your API key so people like me don’t take advantage of it)

do I need to hide my appid also?

View all comments