I substituted the app_key and app_secret values for the app I defined in dropbox in the bootstrap.php file but the autorize.php always responds with “Unable to get request token”.
I have obviously overlooked one simple step in the authorization process but I can’t figure out what step I have missed.
Well the dropbox code there looks nothing whatever like the code is the dropbox sdk but the current dropbox sdk code is labelled version 1 so something there doesn’t make sense.
Every pieces of example dropbox code I look at appears to expect a completely different API - looks like they perhaps had several dozen completely different ones before the current version one.
Neither the DropBox script that didn’t work nor the one that did uses my login details. The one that didn’t work used the access key for the specific APP and then needed to have an authorise step run to get access (which didn’t work) and the one that did work uses a request token that was generated from the access key.
The code that has the access is on my web site set up as a cron job with everything above the public_html so someone would need physical access to the server of have my hosting account login to be able to use that token to break into my dropbox account.
I agree with you that everyone should change their password immediately upon setting up any account that generates an initial password for you. I usually use KeePass to generate passwords that will be impossible to guess.
One alternative to passwords I came across a few months ago that looked like a good idea is a variation on the lost password link where instead of allowing you to set up a replacement password it generates a one time access token to give you access to whatever site you are logging in to - effectively changing your login details for you on each and every login.