austinpickett / discord-irc Goto Github PK

Hi, I came across this repo searching for discord bots and noticed you still have a bot token in your config.json file - if this is the token for one of your current bots its critical that you begin to remove the token off the repo as soon as you can or make the repository private.

The bot token is essentially the bot password and allows anyone to breach and control your bot if someone was to make a bot application to do so under your token, this requires no knowledge of your discord user account details or where the bot is hosted from. It is common Discord knowledge to make sure your token is hidden or nowhere on the internet.

The best steps are to

1. Remove the token off of GitHub
2. Replace it with either a blank space or some sort of indicator on where to put the token
3. Refresh your token, this will generate a new one and will revoke your old public one, this can be done on discordapp.com/developers
4. Replace the token on the bot on your server/computer with the newly generated one.
5. Keep this token private.