search
HomeBackend DevelopmentPHP TutorialHow to encrypt and decrypt data in PHP?

How to encrypt and decrypt data in PHP?

May 12, 2023 am 08:07 AM
php encryption algorithmphp data encryption functionphp data decryption function

PHP is an open source server-side programming language that is widely used in the field of web development. Since web applications often involve users' sensitive information, such as passwords, bank card numbers, etc., it is particularly important to encrypt and decrypt this information.

This article will introduce how to encrypt and decrypt data in PHP, mainly including the following content:

  1. Commonly used encryption algorithms and their characteristics
  2. Used in PHP MD5 encryption
  3. Use sha1 encryption in PHP
  4. Use base64 encoding in PHP
  5. Use openssl extension library in PHP for AES encryption and decryption
  6. Steps to use the mcrypt extension library for AES encryption and decryption in PHP

1. Commonly used encryption algorithms and their characteristics

  1. MD5 algorithm: a commonly used message digest The algorithm maps a string of any length into a 128-bit output value and is widely used in fields such as data encryption and electronic signatures.

Features: The MD5 algorithm is irreversible, that is, the input value cannot be inferred from the output value; the MD5 algorithm ensures that the output value of the same input is the same; the MD5 algorithm is easily cracked by collision attacks.

  1. SHA1 algorithm: A secure hash algorithm, similar to MD5, that maps a string of any length into a 160-bit output value and has good security and anti-collision capabilities.

Features: The SHA1 algorithm is irreversible; the output value length of the SHA1 algorithm is longer than the MD5 algorithm, ensuring better security; the SHA1 algorithm cannot completely prevent collision attacks.

  1. base64 encoding: An encoding method that encodes binary data into highly readable ASCII characters. It is widely used in email, HTTP protocols and other fields.

Features: base64 encoding is not a real encryption algorithm, but an encoding method; base64 encoding does not change the content of the data, but only changes the representation of the data; base64 encoding can increase the stability of data transmission and security.

  1. AES algorithm: Advanced Encryption Standard is a symmetric encryption algorithm used to protect the security of data such as sensitive information. The AES algorithm is divided into three key lengths: 128 bits, 192 bits and 256 bits.

Features: The AES algorithm is symmetric encryption, and the same key is used for encryption and decryption; the AES algorithm has better security and efficiency; the longer the key length used by the AES algorithm, the higher the security .

2. Use MD5 encryption in PHP

Use the md5() function in PHP to encrypt strings with MD5. The sample code is as follows:

$str = "hello world";
$encrypted_str = md5($str);
echo $encrypted_str;

The output result is:

5eb63bbbe01eeed093cb22bb8f5acdc3

3. Use sha1 encryption in PHP

Use the sha1() function in PHP to SHA1 encrypt strings. The sample code is as follows:

$str = "hello world";
$encrypted_str = sha1($str);
echo $encrypted_str;

The output result is :

2ef7bde608ce5404e97d5f042f95f89f1c232871

4. Use base64 encoding in PHP

Use the base64_encode() function in PHP to base64-encode a string, and use the base64_decode() function to base64-encode the string. Decoding, the sample code is as follows:

$str = "hello world";
$encoded_str = base64_encode($str);
echo $encoded_str . "
";  // 输出:aGVsbG8gd29ybGQ=
$decoded_str = base64_decode($encoded_str);
echo $decoded_str;    // 输出:hello world

5. Use the openssl extension library in PHP for AES encryption and decryption

Use the openssl extension library in PHP to perform AES encryption and decryption of data, sample code As follows:

// AES加密
function encrypt($str, $key) {
    $iv_size = openssl_cipher_iv_length('AES-256-CBC');
    $iv = openssl_random_pseudo_bytes($iv_size);   // 生成随机IV
    $encrypted_str = openssl_encrypt($str, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv);
    $result = base64_encode($iv . $encrypted_str);
    return $result;
}

// AES解密
function decrypt($encrypted_str, $key) {
    $encrypted_str = base64_decode($encrypted_str);
    $iv_size = openssl_cipher_iv_length('AES-256-CBC');
    $iv = substr($encrypted_str, 0, $iv_size);
    $encrypted_str = substr($encrypted_str, $iv_size);
    $result = openssl_decrypt($encrypted_str, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv);
    return $result;
}

// 测试代码
$key = "12345678901234567890123456789012";   // AES密钥,32位
$str = "hello world";
$encrypted_str = encrypt($str, $key);
echo $encrypted_str . "
";
$decrypted_str = decrypt($encrypted_str, $key);
echo $decrypted_str . "
";

The output result is:

7KdkeT91N7zg8WZrZ1Oehg==xsYlbGhMF8dNQXH1LqTwVw==
hello world

6. Steps to use the mcrypt extension library for AES encryption and decryption in PHP

Use the mcrypt extension library for AES encryption and decryption The steps for decryption are as follows:

  1. Load the mcrypt extension library
extension_loaded('mcrypt');  // 检查是否已经加载mcrypt扩展库
  1. Generate a random IV
$iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);
$iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
  1. Use mcrypt_encrypt( ) function for AES encryption
$encrypted_str = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key, $str, MCRYPT_MODE_CBC, $iv);
  1. Use the mcrypt_decrypt() function for AES decryption
$decrypted_str = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key, $encrypted_str, MCRYPT_MODE_CBC, $iv);
  1. Use the base64_encode() function to base64 encode the encrypted data
$encrypted_str = base64_encode($iv . $encrypted_str);
  1. Use the substr() function to intercept the IV and ciphertext part of the encrypted data
$iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);
$iv = substr($encrypted_str, 0, $iv_size);
$encrypted_str = substr($encrypted_str, $iv_size);

The complete AES encryption and decryption sample code is as follows:

// AES加密
function encrypt($str, $key) {
    $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);
    $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);    // 生成随机IV
    $encrypted_str = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key, $str, MCRYPT_MODE_CBC, $iv);
    $result = base64_encode($iv . $encrypted_str);    // 对IV和密文进行base64编码
    return $result;
}

// AES解密
function decrypt($encrypted_str, $key) {
    $encrypted_str = base64_decode($encrypted_str);  // 对base64编码的字符串进行解码
    $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);
    $iv = substr($encrypted_str, 0, $iv_size);       // 截取IV值
    $encrypted_str = substr($encrypted_str, $iv_size);    // 截取密文部分
    $result = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key, $encrypted_str, MCRYPT_MODE_CBC, $iv);
    return $result;
}

// 测试代码
$key = "1234567890123456";       // AES密钥,16位
$str = "hello world";
$encrypted_str = encrypt($str, $key);
echo $encrypted_str . "
";
$decrypted_str = decrypt($encrypted_str, $key);
echo $decrypted_str . "
";

The output result is:

Ym63V4DnBc/jk9bNNzlngQtdeecbBZ+E7IHvC6khMgg=
hello world

Summary:

The above is the method of data encryption and decryption in PHP. Different encryption algorithms have different characteristics and applicable scenarios. Development Personnel should select an appropriate encryption method based on actual needs and security requirements. While using encryption methods, you also need to pay attention to the security protection of keys and encryption processes to avoid being attacked by hackers.

The above is the detailed content of How to encrypt and decrypt data in PHP?. For more information, please follow other related articles on the PHP Chinese website!

Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
How do you set the session cookie parameters in PHP?How do you set the session cookie parameters in PHP?Apr 22, 2025 pm 05:33 PM

Setting session cookie parameters in PHP can be achieved through the session_set_cookie_params() function. 1) Use this function to set parameters, such as expiration time, path, domain name, security flag, etc.; 2) Call session_start() to make the parameters take effect; 3) Dynamically adjust parameters according to needs, such as user login status; 4) Pay attention to setting secure and httponly flags to improve security.

What is the main purpose of using sessions in PHP?What is the main purpose of using sessions in PHP?Apr 22, 2025 pm 05:25 PM

The main purpose of using sessions in PHP is to maintain the status of the user between different pages. 1) The session is started through the session_start() function, creating a unique session ID and storing it in the user cookie. 2) Session data is saved on the server, allowing data to be passed between different requests, such as login status and shopping cart content.

How can you share sessions across subdomains?How can you share sessions across subdomains?Apr 22, 2025 pm 05:21 PM

How to share a session between subdomains? Implemented by setting session cookies for common domain names. 1. Set the domain of the session cookie to .example.com on the server side. 2. Choose the appropriate session storage method, such as memory, database or distributed cache. 3. Pass the session ID through cookies, and the server retrieves and updates the session data based on the ID.

How does using HTTPS affect session security?How does using HTTPS affect session security?Apr 22, 2025 pm 05:13 PM

HTTPS significantly improves the security of sessions by encrypting data transmission, preventing man-in-the-middle attacks and providing authentication. 1) Encrypted data transmission: HTTPS uses SSL/TLS protocol to encrypt data to ensure that the data is not stolen or tampered during transmission. 2) Prevent man-in-the-middle attacks: Through the SSL/TLS handshake process, the client verifies the server certificate to ensure the connection legitimacy. 3) Provide authentication: HTTPS ensures that the connection is a legitimate server and protects data integrity and confidentiality.

The Continued Use of PHP: Reasons for Its EnduranceThe Continued Use of PHP: Reasons for Its EnduranceApr 19, 2025 am 12:23 AM

What’s still popular is the ease of use, flexibility and a strong ecosystem. 1) Ease of use and simple syntax make it the first choice for beginners. 2) Closely integrated with web development, excellent interaction with HTTP requests and database. 3) The huge ecosystem provides a wealth of tools and libraries. 4) Active community and open source nature adapts them to new needs and technology trends.

PHP and Python: Exploring Their Similarities and DifferencesPHP and Python: Exploring Their Similarities and DifferencesApr 19, 2025 am 12:21 AM

PHP and Python are both high-level programming languages ​​that are widely used in web development, data processing and automation tasks. 1.PHP is often used to build dynamic websites and content management systems, while Python is often used to build web frameworks and data science. 2.PHP uses echo to output content, Python uses print. 3. Both support object-oriented programming, but the syntax and keywords are different. 4. PHP supports weak type conversion, while Python is more stringent. 5. PHP performance optimization includes using OPcache and asynchronous programming, while Python uses cProfile and asynchronous programming.

PHP and Python: Different Paradigms ExplainedPHP and Python: Different Paradigms ExplainedApr 18, 2025 am 12:26 AM

PHP is mainly procedural programming, but also supports object-oriented programming (OOP); Python supports a variety of paradigms, including OOP, functional and procedural programming. PHP is suitable for web development, and Python is suitable for a variety of applications such as data analysis and machine learning.

PHP and Python: A Deep Dive into Their HistoryPHP and Python: A Deep Dive into Their HistoryApr 18, 2025 am 12:25 AM

PHP originated in 1994 and was developed by RasmusLerdorf. It was originally used to track website visitors and gradually evolved into a server-side scripting language and was widely used in web development. Python was developed by Guidovan Rossum in the late 1980s and was first released in 1991. It emphasizes code readability and simplicity, and is suitable for scientific computing, data analysis and other fields.

See all articles

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

VSCode Windows 64-bit Download

VSCode Windows 64-bit Download

A free and powerful IDE editor launched by Microsoft

DVWA

DVWA

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

PhpStorm Mac version

PhpStorm Mac version

The latest (2018.2.1) professional PHP integrated development tool

SublimeText3 English version

SublimeText3 English version

Recommended: Win version, supports code prompts!

Atom editor mac version download

Atom editor mac version download

The most popular open source editor