That's why I said I built a plugin - not just putting in code. I even said that after. I think it should be common sense that putting some code with your apikey - anyone can see it. You are going to have to do something (whether that is a WP plugin, or something else)