# "Who's online" widget in Discourse - my version

**URL:** <https://meta.discourse.org/t/whos-online-widget-in-discourse-my-version/31722>\
**Category:** Marketplace\
**Tags:** wordpress\
**Created:** [4 Agosto 2015, 2:25am UTC](https://meta.discourse.org/t/whos-online-widget-in-discourse-my-version/31722 "2015-08-04T02:25:06Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![meglio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/meglio/32/71444_2.png) [@meglio](https://meta.discourse.org/u/meglio)\
**Post date:** [4 Agosto 2015, 8:46am UTC](https://meta.discourse.org/t/whos-online-widget-in-discourse-my-version/31722/6 "2015-08-04T08:46:33Z")

</div>

That’s because I want to hide my api key.  
If the api was not restricted to admins only, I’d call it directly from the user browser.

**UPD.** Does it make sense? I suppose it is not safe to disclose the api key?

---

_[View the full topic](https://meta.discourse.org/t/whos-online-widget-in-discourse-my-version/31722)._