diff --git a/.gitignore b/.gitignore
index 1c106f4..d3a11fd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,10 @@ self_update.php
 version_check.php
 test_sync.php
 db/debug_ip_v2.php
+
+# ===== 支付密钥 - 严禁提交 (double insurance) =====
+# 彩虹易支付 RSA 私钥/公钥/商户ID 全部在此文件，一旦进 git 或进公网 web 根目录即泄露
+密钥文件_git拉黑.txt
+pay_secrets.php
+*.paykey
+