| @@ -174,9 +174,14 @@ | ||
| 174 | 174 | |
| 175 | 175 | $payload['body']['data'] = is_array($body) ? $body : json_decode($body, true); |
| 176 | 176 | $payload['body']['endpoint'] = $endpoint; |
| 177 | 177 | |
| 178 | - $payload['body']['settings'] = WooMailerLiteOptions::all(); | |
| 178 | + $settings = WooMailerLiteOptions::all(); | |
| 179 | + // Never mirror credentials to the remote log endpoint. Strip the | |
| 180 | + // encrypted API key and classic consumer key/secret from the blob. | |
| 181 | + unset($settings['apiKey'], $settings['consumerKey'], $settings['consumerSecret']); | |
| 182 | + | |
| 183 | + $payload['body']['settings'] = $settings; | |
| 179 | 184 | $payload['body']['settings']['woo_ml_shop_id'] = WooMailerLiteOptions::get('shopId'); |
| 180 | 185 | unset($payload['method']); |
| 181 | 186 | $payload['body'] = json_encode($payload['body']); |
| 182 | 187 | |
