# Security bug - sketches accessible to the world

**URL:** <https://discourse.processing.org/t/security-bug-sketches-accessible-to-the-world/22777>\
**Category:** p5.js\
**Created:** [July 22, 2020, 10:29am UTC](https://discourse.processing.org/t/security-bug-sketches-accessible-to-the-world/22777 "2020-07-22T10:29:46Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![oshedar](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/oshedar/32/10057_2.png) [@oshedar](https://discourse.processing.org/u/oshedar)\
**Post date:** [July 22, 2020, 10:29am UTC](https://discourse.processing.org/t/security-bug-sketches-accessible-to-the-world/22777/1 "2020-07-22T10:29:46Z")

</div>

p5js has a security bug where everyone can see my sketches by typing following url in browser [https://editor.p5js.org/myusername/sketches](https://editor.p5js.org/myusername/sketches)

This makes it difficult to teach as my students have access to the answers to my practice assignments

---

<div class="post-metadata">

**Author:** ![glv](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/glv/32/18785_2.png) [@glv](https://discourse.processing.org/u/glv)\
**Post date:** [July 22, 2020, 12:26pm UTC](https://discourse.processing.org/t/security-bug-sketches-accessible-to-the-world/22777/2 "2020-07-22T12:26:15Z")

</div>

Hello,

There is some related information here:

> **[All Projects · processing/p5.js-web-editor](https://github.com/processing/p5.js-web-editor/projects/4#card)**
>
> p5.js Web Editor, officially launched! Contribute to processing/p5.js-web-editor development by creating an account on GitHub.

> [@oshedar](#):
>
> This makes it difficult to teach as my students have access to the answers to my practice assignments

I would keep all solutions offline.

I do not use P5.js often but able to use it with P5.js mode in the Processing PDE (you need to update the \*.js files to current ones) and as per instructions [here](https://p5js.org/get-started/).

You can expect to have students visit the forums and there is a homework policy [here](https://discourse.processing.org/faq).

And discussion here:

> [@Helping students with their homework](https://discourse.processing.org/t/helping-students-with-their-homework/17745):
>
> I tried to find some guidelines in the forum about how to help students who are asking for help with their homework. It may be useful to have this information in a very visible place on the site? In the past week have noticed a couple of instances of students asking for help with homework assignments BUT without showing any code or attempt at the code. I’m not sure how helpful it is for experienced coders to solve a student’s coding problem in its entirety without explanation. Nor is it ethica…

`:)`

---

<div class="post-metadata">

**Author:** ![GoToLoop](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/gotoloop/32/86_2.png) [@GoToLoop](https://discourse.processing.org/u/GoToLoop)\
**Post date:** [July 22, 2020, 1:53pm UTC](https://discourse.processing.org/t/security-bug-sketches-accessible-to-the-world/22777/3 "2020-07-22T13:53:13Z")

</div>

> [@oshedar](#):
>
> … as my students have access to the answers to my practice assignments.

You can transfer them to some other online code host which offers that private project feature. 🕵️‍♂️

For example, when creating a repo or gist on GitHub we can choose if it is private or public: 🐙

> **[Build software better, together](https://github.com/new)**
>
> GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.

For paid options, OpenProcessing and CodePen are more fit to showcase sketches: 😉

> **[Plus+ Membership - OpenProcessing](https://openprocessing.org/membership)**
>
> Learn more about the Plus+ Membership Benefits on OpenProcessing

[CodePen.io/features/pro](http://CodePen.io/features/pro)

---

<div class="post-metadata">

**Author:** ![slow\_izzm](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/slow_izzm/32/5637_2.png) [@slow\_izzm](https://discourse.processing.org/u/slow_izzm)\
**Post date:** [July 23, 2020, 2:27am UTC](https://discourse.processing.org/t/security-bug-sketches-accessible-to-the-world/22777/4 "2020-07-23T02:27:02Z")

</div>

I’ve seen feature requests for a private option, I am sure it will come. Until then, like @GoToLoop suggested, throw the solution up on a private gist or repo, maybe even in dropbox and only allow those with the link to view it.

Another option is to host the solution on the web editor and then delete it at the end of the semester.

---

<div class="post-metadata">

**Author:** ![oshedar](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/oshedar/32/10057_2.png) [@oshedar](https://discourse.processing.org/u/oshedar)\
**Post date:** [July 23, 2020, 6:01am UTC](https://discourse.processing.org/t/security-bug-sketches-accessible-to-the-world/22777/5 "2020-07-23T06:01:21Z")

</div>

Thank you for your reply. Switching to using processing IDE instead of p5js to conduct my classes. This way all my sketches can be offline. Plus i can teach coding in java and students learn how to use a modern IDE at the same time. I chose processing to introduce first time students to coding as the ouput is more tangible and less abstract. This pipes up the interest of the students especially children