{"id":11917,"date":"2026-07-06T10:14:20","date_gmt":"2026-07-06T08:14:20","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=11917"},"modified":"2026-07-06T10:14:27","modified_gmt":"2026-07-06T08:14:27","slug":"de-ce-fisierele-env-nu-trebuie-sa-fie-niciodata-publice","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/","title":{"rendered":"De ce fi\u0219ierele .env nu trebuie s\u0103 fie niciodat\u0103 publice"},"content":{"rendered":"<div class=\"translation-block translation-block-merged\">\n<p class=\"wp-block-paragraph\">Un fi\u0219ier <code>.env<\/code> este utilizat \u00een mod obi\u0219nuit de site-urile web \u0219i aplica\u021bii pentru a stoca configura\u021bii specifice mediului. Acesta poate con\u021bine date de autentificare pentru baze de date, chei API, secrete ale aplica\u021biei, set\u0103ri de e-mail \u0219i alte valori sensibile necesare pentru func\u021bionarea aplica\u021biei.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Acest fi\u0219ier nu trebuie s\u0103 fie niciodat\u0103 accesibil publicului prin intermediul unui browser. Dac\u0103 un fi\u0219ier <code>.env<\/code> poate fi deschis online, informa\u021biile sensibile pot fi expuse, iar site-ul web, baza de date, conturile de e-mail sau serviciile conectate pot fi expuse riscului.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Cuprins<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class=\"ez-toc-list ez-toc-list-level-1\"><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#What_a_env_file_is\">Ce este un fi\u0219ier .env<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#Why_env_files_are_sensitive\">De ce fi\u0219ierele .env sunt sensibile<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#What_can_happen_if_a_env_file_is_public\">Ce se poate \u00eent\u00e2mpla dac\u0103 un fi\u0219ier .env este public<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#Public_folder_vs_private_application_files\">Dosarul public vs. fi\u0219ierele private ale aplica\u021biei<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/mybox.com\/help\/ro\/baza_de_cuno\u0219tin\u021be\/de-ce-fi\u0219ierele-de-mediu-nu-trebuie-s\u0103-fie-niciodat\u0103-publice\/#Fi\u015fierul_ascuns_nu_\u00eenseamn\u0103_fi\u0219ier_protejat\">Un fi\u0219ier ascuns nu \u00eenseamn\u0103 un fi\u0219ier protejat<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#Debug_mode_can_increase_the_risk\">Modul de depanare poate cre\u0219te riscul<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/de-ce-fi\u0219ierele-env-nu-trebuie-s\u0103-fie-niciodat\u0103-publice\/#Cum_s\u0103_proteja\u021bi_fi\u0219ierele_env\">Cum s\u0103 proteja\u021bi fi\u0219ierele .env<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#What_to_check\">Ce trebuie verificat<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/de ce-fi\u0219ierele-env-nu-trebuie-s\u0103-fie-niciodat\u0103-publice\/#Dac\u0103_un_fi\u0219ier_.env_a_fost_expus\">Dac\u0103 un fi\u0219ier .env a fost expus<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#env_files_and_backups\">.fi\u0219iere .env \u0219i copii de rezerv\u0103<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#Practical_meaning_for_users\">Semnifica\u021bie practic\u0103 pentru utilizatori<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/why-env-files-must-never-be-public\/#Summary\">Rezumat<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_a_env_file_is\"><\/span>Ce este un fi\u0219ier .env<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<\/div>\n\n<div id=\"mybox-1979202923\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Acces timpuriu<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Mai ave\u021bi nevoie de ajutor?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contacta\u021bi echipa noastr\u0103 de servicii pentru clien\u021bi.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Trimite mesaj<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\">Un fi\u0219ier <code>.env<\/code> stocheaz\u0103 valorile de configurare \u00een afara codului principal al aplica\u021biei.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Aplica\u021biile \u00eel utilizeaz\u0103 adesea pentru a defini set\u0103ri precum:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>numele de gazd\u0103 al bazei de date<\/li>\n\n\n\n<li>numele bazei de date<\/li>\n\n\n\n<li>numele de utilizator al bazei de date<\/li>\n\n\n\n<li>parola bazei de date<\/li>\n\n\n\n<li>cheile secrete ale aplica\u021biei<\/li>\n\n\n\n<li>cheile API<\/li>\n\n\n\n<li>datele de autentificare SMTP<\/li>\n\n\n\n<li>cheile serviciului de pl\u0103\u021bi<\/li>\n\n\n\n<li>token-urile de integrare cu ter\u021bi<\/li>\n\n\n\n<li>set\u0103rile de depanare<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Acest lucru \u00eei ajut\u0103 pe dezvoltatori s\u0103 p\u0103streze configura\u021bia separat\u0103 de fi\u0219ierele aplica\u021biei. De asemenea, faciliteaz\u0103 utilizarea unor set\u0103ri diferite pentru mediile de dezvoltare, de testare \u0219i de produc\u021bie.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_env_files_are_sensitive\"><\/span>De ce fi\u0219ierele .env sunt sensibile<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Un fi\u0219ier <code>.env<\/code> con\u021bine adesea informa\u021bii care permit accesul la alte sisteme.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">De exemplu, datele de autentificare pentru baza de date pot permite accesul la con\u021binutul site-ului web \u0219i la datele utilizatorilor. Cheile API pot permite accesul la servicii externe. Datele de autentificare SMTP pot permite trimiterea de e-mailuri de pe un domeniu sau dintr-o c\u0103su\u021b\u0103 po\u0219tal\u0103.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Din acest motiv, un fi\u0219ier <code>.env<\/code> trebuie tratat ca un fi\u0219ier cu parole. Acesta nu este destinat s\u0103 fie desc\u0103rcat, indexat, partajat sau vizibil prin intermediul site-ului web.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Ce_se_poate_\u00eent\u00e2mpla_dac\u0103_un_fi\u0219ier_.env_este_public\"><\/span>Ce se poate \u00eent\u00e2mpla dac\u0103 un fi\u0219ier .env este public<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Dac\u0103 un fi\u0219ier <code>.env<\/code> devine accesibil publicului, cineva ar putea citi informa\u021biile confiden\u021biale con\u021binute \u00een acesta.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00cen func\u021bie de con\u021binutul fi\u0219ierului, acest lucru poate duce la:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>acces neautorizat la baza de date<\/li>\n\n\n\n<li>dezv\u0103luirea informa\u021biilor confiden\u021biale ale aplica\u021biei<\/li>\n\n\n\n<li>utilizarea abuziv\u0103 a adreselor de e-mail prin intermediul datelor de autentificare SMTP<\/li>\n\n\n\n<li>furtul cheilor API sau al token-urilor<\/li>\n\n\n\n<li>acces la servicii de plat\u0103, stocare sau automatizare<\/li>\n\n\n\n<li>compromiterea site-ului web<\/li>\n\n\n\n<li>trimiterea de spam<\/li>\n\n\n\n<li>scurgeri de date<\/li>\n\n\n\n<li>abuzul serviciilor sau costuri nea\u0219teptate<\/li>\n\n\n\n<li>probleme legate de reputa\u021bia domeniului sau a adresei de e-mail<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Riscul depinde de con\u021binutul fi\u0219ierului, dar orice fi\u0219ier public <code>.env<\/code> ar trebui tratat ca un incident de securitate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Public_folder_vs_private_application_files\"><\/span>Dosar public vs. fi\u0219iere private ale aplica\u021biei<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">O gre\u0219eal\u0103 frecvent\u0103 este plasarea fi\u0219ierului <code>.env<\/code> \u00eentr-un director web public.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Directorul web public este folderul servit direct de serverul web. Fi\u0219ierele din acesta pot fi accesibile dintr-un browser dac\u0103 nicio regul\u0103 de protec\u021bie nu le blocheaz\u0103.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">De exemplu, dac\u0103 folderul public al unui site web este:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>public_html\/\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">atunci plasarea unui fi\u0219ier <code>.env<\/code> aici \u00eel poate expune la o adres\u0103 URL precum:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>https:\/\/example.com\/.env\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">O structur\u0103 mai sigur\u0103 p\u0103streaz\u0103 fi\u0219ierul <code>.env<\/code> \u00een afara directorului web public, ori de c\u00e2te ori aplica\u021bia permite acest lucru.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Hidden_file_does_not_mean_protected_file\"><\/span>Un fi\u0219ier ascuns nu \u00eenseamn\u0103 un fi\u0219ier protejat<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Punctul de la \u00eenceputul fi\u0219ierului <code>.env<\/code> indic\u0103 faptul c\u0103 fi\u0219ierul este ascuns \u00een multe gestionare de fi\u0219iere \u0219i vizualiz\u0103ri din linia de comand\u0103. Acest lucru nu \u00eenseamn\u0103 automat c\u0103 fi\u0219ierul este protejat \u00eempotriva accesului web.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Posibilitatea de a deschide fi\u0219ierul dintr-un browser depinde de configura\u021bia serverului \u0219i de locul \u00een care este stocat fi\u0219ierul.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Un fi\u0219ier ascuns poate fi totu\u0219i public dac\u0103 este plasat \u00eentr-un director servit de site-ul web \u0219i accesul nu este blocat.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Debug_mode_can_increase_the_risk\"><\/span>Modul de depanare poate cre\u0219te riscul<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Unele aplica\u021bii utilizeaz\u0103 valorile din fi\u0219ierul <code>.env<\/code> pentru a controla modul de depanare.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dac\u0103 modul de depanare este activat pe un site web live, paginile de eroare pot dezv\u0103lui c\u0103i de acces la fi\u0219iere, detalii de configurare, erori de baz\u0103 de date, urme de stiv\u0103 sau alte informa\u021bii tehnice.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Modul de depanare ar trebui, \u00een mod normal, s\u0103 fie dezactivat pe site-urile de produc\u021bie. Este util \u00een timpul dezvolt\u0103rii, dar poate expune informa\u021bii care nu ar trebui s\u0103 fie vizibile pentru vizitatori.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_protect_env_files\"><\/span>Cum s\u0103 proteja\u021bi fi\u0219ierele .env<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cea mai sigur\u0103 abordare este s\u0103 p\u0103stra\u021bi fi\u0219ierele <code>.env<\/code> \u00een afara directorului web public, atunci c\u00e2nd este posibil.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dac\u0103 aplica\u021bia necesit\u0103 ca fi\u0219ierul <code>.env<\/code> s\u0103 se afle \u00een directorul proiectului, asigura\u021bi-v\u0103 c\u0103 serverul web blocheaz\u0103 accesul direct la acesta.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pentru configura\u021biile bazate pe Apache, accesul poate fi adesea blocat cu reguli din fi\u0219ierul <code>.htaccess<\/code>, \u00een func\u021bie de configura\u021bia g\u0103zduirii. Pentru configura\u021biile bazate pe Nginx, accesul este de obicei blocat prin configura\u021bia serverului.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Metoda exact\u0103 depinde de aplica\u021bie \u0219i de mediul de g\u0103zduire.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_to_check\"><\/span>Ce trebuie verificat<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Verifica\u021bi urm\u0103toarele:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Confirma\u021bi unde se afl\u0103 fi\u0219ierul <code>.env<\/code>.<\/li>\n\n\n\n<li>Verifica\u021bi dac\u0103 se afl\u0103 \u00eentr-un director web public.<\/li>\n\n\n\n<li>\u00cencerca\u021bi s\u0103 deschide\u021bi <code>https:\/\/example.com\/.env<\/code> \u00eentr-un browser.<\/li>\n\n\n\n<li>Asigura\u021bi-v\u0103 c\u0103 fi\u0219ierul nu este vizibil \u0219i nu poate fi desc\u0103rcat.<\/li>\n\n\n\n<li>Verifica\u021bi dac\u0103 backup-urile, arhivele sau copiile vechi con\u021bin fi\u0219iere <code>.env<\/code>.<\/li>\n\n\n\n<li>Verifica\u021bi dac\u0103 fi\u0219ierul <code>.env<\/code> este exclus din depozitele publice.<\/li>\n\n\n\n<li>Dezactiva\u021bi modul de depanare pe site-urile web de produc\u021bie.<\/li>\n\n\n\n<li>Verifica\u021bi permisiunile fi\u0219ierelor.<\/li>\n\n\n\n<li>Verifica\u021bi regulile serverului web care blocheaz\u0103 fi\u0219ierele sensibile.<\/li>\n\n\n\n<li>Schimba\u021bi secretele expuse dac\u0103 fi\u0219ierul a fost vreodat\u0103 public.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Un fi\u0219ier <code>.env<\/code> blocat poate returna un r\u0103spuns 403, 404 sau similar. Important este ca con\u021binutul s\u0103u s\u0103 nu fie afi\u0219at.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"If_a_env_file_was_exposed\"><\/span>Dac\u0103 un fi\u0219ier .env a fost expus<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Dac\u0103 un fi\u0219ier <code>.env<\/code> a fost accesibil publicului, nu v\u0103 limita\u021bi doar la mutarea sau ascunderea fi\u0219ierului.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Presupune\u021bi c\u0103 valorile din interiorul acestuia ar fi putut fi copiate. Orice secret expus trebuie \u00eenlocuit, inclusiv parolele bazelor de date, cheile API, parolele SMTP, cheile aplica\u021biilor \u0219i token-urile.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dup\u0103 schimbarea datelor secrete, verifica\u021bi site-ul web \u0219i serviciile conectate pentru a depista activit\u0103\u021bi suspecte.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"env_files_and_backups\"><\/span>.fi\u0219iere .env \u0219i copii de rezerv\u0103<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Copiile de rezerv\u0103, arhivele ZIP, folderele vechi ale proiectelor \u0219i copiile de implementare pot expune acelea\u0219i informa\u021bii dac\u0103 sunt plasate \u00een directoare publice.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Exemple includ:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>.env.backup\n.env.old\nbackup.zip\nsite-backup.tar.gz\nproject-copy\/\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Aceste fi\u0219iere nu ar trebui s\u0103 fie accesibile publicului. Copiile vechi pot fi la fel de periculoase ca fi\u0219ierul activ <code>.env<\/code>, deoarece pot con\u021bine date de autentificare valide.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Practical_meaning_for_users\"><\/span>Semnifica\u021bia practic\u0103 pentru utilizatori<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Un fi\u0219ier <code>.env<\/code> trebuie tratat ca o configura\u021bie sensibil\u0103, nu ca un fi\u0219ier obi\u0219nuit al site-ului web.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Acesta nu trebuie s\u0103 fie vizibil \u00een browser, inclus \u00een desc\u0103rc\u0103rile publice, l\u0103sat \u00een copiile de rezerv\u0103 publice sau ad\u0103ugat \u00een depozitele publice de cod. Dac\u0103 o aplica\u021bie depinde de acesta, fi\u0219ierul trebuie stocat \u0219i protejat \u00een conformitate cu cerin\u021bele aplica\u021biei.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dac\u0103 exist\u0103 vreo posibilitate ca fi\u0219ierul s\u0103 fi fost expus, cel mai sigur pas urm\u0103tor este s\u0103 schimba\u021bi secretele, \u00een loc s\u0103 modifica\u021bi doar loca\u021bia fi\u0219ierului.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Summary\"><\/span>Rezumat<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Fi\u0219ierele <code>.env<\/code> nu trebuie s\u0103 fie niciodat\u0103 publice, deoarece con\u021bin adesea date de autentificare, chei API, tokenuri \u0219i secrete ale aplica\u021biei. Dac\u0103 sunt expuse, acestea pot oferi acces neautorizat la baze de date, servicii de e-mail, platforme ter\u021be sau chiar la site-ul web \u00eensu\u0219i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Un fi\u0219ier <code>.env<\/code> trebuie stocat, pe c\u00e2t posibil, \u00een afara directorului web public, blocat \u00eempotriva accesului din browser, exclus din depozitele publice \u0219i verificat cu aten\u021bie dup\u0103 orice suspiciune de expunere.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[10],"manual_kb_tag":[],"class_list":["post-11917","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-safety"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/11917","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":1,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/11917\/revisions"}],"predecessor-version":[{"id":11918,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/11917\/revisions\/11918"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/media?parent=11917"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manualknowledgebasecat?post=11917"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb_tag?post=11917"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}