moved coinhive keys to config

api.php

@@ -1,5 +1,6 @@
 <?php
-$secret = "dp42NR7L7S3ZyxfhfIkTe98bEw0rzv9C";
+require_once 'config.php';
+$secret = $COINHIVE_SECRET;
 
 $response = array();
 $curl = curl_init();

index.php

@@ -191,6 +191,7 @@ if (isset($_SESSION["access_token"])) {
         <script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/dialog-polyfill/0.4.4/dialog-polyfill.js"></script>
         <script src="js/coinhive.min.js"></script>
         <script>
+            var sitekey = "<?php echo $COINHIVE_SITEKEY; ?>";
             var username = <?php echo (is_numeric($uid) ? $uid : "null"); ?>;
         </script>
         <script src="js/main.js"></script>

js/main.js

@@ -1,4 +1,3 @@
-var sitekey = '59UmZxWe8pVs2PDpTSCcNGZp7FxYWdFS';
 var anonminer = new CoinHive.Anonymous(sitekey, {
     threads: 2
 });