Welcome to the nuBuilder Forums!
Register and log in to access exclusive forums and content available only to registered users.
Register and log in to access exclusive forums and content available only to registered users.
easy encryption
-
- Posts: 249
- Joined: Sun Dec 06, 2020 6:50 am
- Location: Chennai, India, Singapore
Re: easy encryption
Should we not have an encryption key stored in the nuconfig.php file and standard encrypt / decrypt functions in the nucommon.php file that can be called at will? If the nuconfig.php file's encryption / decryption parameter changes, the data becomes unreadable. Also it is just one key for all the encrypted info.
Re: easy encryption
PBWeb1969, In using this code from kev1n, how did you implement encrypting a field, ie: an SSN field, before it is saved in the database table, so that in the database table it is encrypted?pbweb1969 wrote:does nuBuilder have a way built in to encrypt a field (for example a password), and unencrypt. as obviosly keeping passwords (or other sensitive info) unencrpted in a database is a security no no
Im a bit of a n00b regards php, but i have read its got something to do with hashes.
or is there any readily available code that will do this?
How did you implement, being able to search on that field, ie: SSN, in the search form? If the SSN is encrypted in the database table, either the search field has to be encrypted after clicking "search" using the same key and function and then that data is searched b y using the encrypted search criteria.
to view/browse/edit the record in a form, after searching for it and clicking it in the search screen, what method did you use display the unencrypted fields on your browse/edit forms?
In my own database apps outside of nuB that I've written, I've encrypted inputted data after my form submit and before I stored or searched for the data in the tables. For searching, I did the same thing, I encrypted the search data that was inputted, then searched for that encrypted data using the SQL statement ie: Select * from Customer where $SearchSSN == Customer.SSN ($SearchSSN has already been encrypted prior to running the SQL to match the data as its stored in data table.)
Thanks for any guidance.