md5加密解密

Question

I have a field in my database table with the name download_key. It is saved normally in the table no encryption is done. I am sending this key as hidden value in the form. If someone right click on the page and view the source of page the key is visible. Is it possible to encrypt it in the view only? I am also comparing the hidden value of the key with the one stored in database.

Some code

Controller

$query = $this->db->get_where('mc_boxes', array('idmc_boxes' => $id));
$row = $query->row();
$data['download_key'] = strtolower($row->downloadkey);

Inside my view

<form name="form" method="post" onsubmit="return validateForm('<?php echo $download_key ?>')"> 
    <input type="hidden" name="key" value="<?php echo $download_key ?>" />
</form>

Answer 1

Why don't you use sessions?

$_SESSION['DL_KEY'] = strtolower($row->downloadkey);

and there will not be necessarry to echo it in the form

Answer 2

Try using reversable encryption with key (that will be only in your config, hidden from anyone else).

$key = 'YOUR_UNIQUE_KEY_HERE';
$phrase = 'PHRASE_TO_DECODE_OR_ENCODE';
if ($method == 'encode')
    return base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $key, $phrase, MCRYPT_MODE_ECB, mcrypt_create_iv(32, MCRYPT_RAND)));
else if ($method == 'decode')
    return trim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $key, base64_decode($phrase), MCRYPT_MODE_ECB, mcrypt_create_iv(32, MCRYPT_RAND)));

Answer 3

There are Encryption/Decryption functions available - please have a look at http://codeigniter.com/user_guide/libraries/encryption.html

$msg = 'My secret message';
$key = 'super-secret-key';

$encrypted_string = $this->encrypt->encode($msg, $key);

$encrypted_string = 'APANtByIGI1BpVXZTJgcsAG8GZl8pdwwa84';

$plaintext_string = $this->encrypt->decode($encrypted_string);

See if this helps in your case. :)

Answer 4

Look at function md5 . It is a native php function. Has nothing to do with codeigniter.

string md5 ( string $str [, bool $raw_output = false ] ) is the function signature.

Answer 5

Print your key in the form like this:

    echo $this->encrypt->encode($download_key); 

Then, before it gets inserted into the database, do this:

    $download_key = $this->encypt->decode($download_key);