如何加密通过Wordpress中的联系表单7上载的文件并在通过TLS发送电子邮件之前将其解密

Question

I am developing a WordPress web site for a health care organisation where data from users of the website must be treated very securely. Users of the website can use a contact form to send information to the organisation. The form is built using Contact Form 7. The web site uses HTTPS with a valid certificate. So data is transferred from the form on the browser to the web server where it is immediately sent via email over TLS to the organisation's mail server which is configured for TLS. No data from the form is stored on the server either in file or in a database. The data in only ever in unencrypted form (in memory) for as long as the HTTPS request / response cycle.

However, the organisation now wants to let users upload a file along with the contact form data. Contact Form 7 supports file upload. The connection is still HTTPS so the file will be encrypted on the way up to the web server. The file will be stored temporarily on the web server before being attached to the email that is sent over TLS to the mail server. The file will be deleted once the email has been sent.

So there is now a chink in the armour. That chink is the file that is stored "temporarily" on the server. Using the default upload option, the file will be stored in unencrypted format. This means that the data exists outside of process memory in a decrypted format for a period of time. Furthermore, although the intention is that the file is only kept in decrypted format for a short period of time, this may not always be the case. For example, the file deletion may fail or may not even happen due to some prior error.

So my question is whether it is possible to ensure that the uploaded file is only ever stored in encrypted form on the web server AND additionally is decrypted in memory before sending via email.

I can't find a way of doing this with Contact Form 7. Also I haven't been able to find another plugin that does this.

Any ideas or suggestions?

Thanks.

Answer 1

First of all, plugin recommendation requests are off-topic on SO.

Secondly, and most importantly, what you are trying to do with the contact form, the personal data involved and encryption has huge legal liabilities when you do things wrong.

You need to know know - and possibly your employer needs to know, too, being a health organization - that you're dealing with federal law, specifically HIPAA. Read http://www.hhs.gov/hipaa/

Tell your employer to hire a professional with experience in HIPAA compliant servers and data storage principles.