JConfig $secret

[Izhar Aazmi]

This is about JConfig::$secret. I understand that it is generated during first install of Joomla. 

I wanted to know whether this value is (ideally) restricted to be used by the core only or other extension developers are also allowed to use it?

[Hannes Papenberg]

You can use that data, too, just don't change it unexpectedly. And you
have to make sure that the secret stays a secret and does not leave your
server.

> --
> You received this message because you are subscribed to the Google
> Groups "Joomla! CMS Development" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to joomla-dev-cm...@googlegroups.com
> <mailto:joomla-dev-cm...@googlegroups.com>.
> To post to this group, send email to joomla-...@googlegroups.com
> <mailto:joomla-...@googlegroups.com>.
> Visit this group at https://groups.google.com/group/joomla-dev-cms.
> For more options, visit https://groups.google.com/d/optout.

[brian teeman]

Just remember that it may not be unique to a specific site. If a developer simply uses the same site to build all their client sites with and jut copies the files then they will all share the same secret