Welcome to the nuBuilder Forums!

Register and log in to access exclusive forums and content available only to registered users.

easy encryption

Questions related to customising nuBuilder Forte with JavaScript or PHP.
apmuthu
Posts: 249
Joined: Sun Dec 06, 2020 6:50 am
Location: Chennai, India, Singapore

Re: easy encryption

Unread post by apmuthu »

Should we not have an encryption key stored in the nuconfig.php file and standard encrypt / decrypt functions in the nucommon.php file that can be called at will? If the nuconfig.php file's encryption / decryption parameter changes, the data becomes unreadable. Also it is just one key for all the encrypted info.
icoso
Posts: 181
Joined: Sun Feb 07, 2021 11:09 pm
Been thanked: 1 time

Re: easy encryption

Unread post by icoso »

pbweb1969 wrote:does nuBuilder have a way built in to encrypt a field (for example a password), and unencrypt. as obviosly keeping passwords (or other sensitive info) unencrpted in a database is a security no no

Im a bit of a n00b regards php, but i have read its got something to do with hashes.

or is there any readily available code that will do this?
PBWeb1969, In using this code from kev1n, how did you implement encrypting a field, ie: an SSN field, before it is saved in the database table, so that in the database table it is encrypted?

How did you implement, being able to search on that field, ie: SSN, in the search form? If the SSN is encrypted in the database table, either the search field has to be encrypted after clicking "search" using the same key and function and then that data is searched b y using the encrypted search criteria.

to view/browse/edit the record in a form, after searching for it and clicking it in the search screen, what method did you use display the unencrypted fields on your browse/edit forms?

In my own database apps outside of nuB that I've written, I've encrypted inputted data after my form submit and before I stored or searched for the data in the tables. For searching, I did the same thing, I encrypted the search data that was inputted, then searched for that encrypted data using the SQL statement ie: Select * from Customer where $SearchSSN == Customer.SSN ($SearchSSN has already been encrypted prior to running the SQL to match the data as its stored in data table.)

Thanks for any guidance.
Post Reply