[support] Encrypting CCK Data

Gordon Heydon gordon at heydon.com.au
Tue Feb 3 23:05:27 UTC 2009


HI,

Because of how PHP works is is not really possible to encrypt data  
within the Drupal database.

basically the problem is that to encrypt and decrypt the data you will  
need the private key, so any person who wants to find decrypt the data  
will most likely have full access to the private key and all the code  
to decrypt it. Even to the point of just calling directly the same php  
code to get the get the clear text.

I would love to be able to do this for e-Commerce, but there is no way  
to keep it 100% safe. If they have access to the database, the rest is  
available to get the clear text version.

Gordon.

On 04/02/2009, at 5:56 AM, Steve Kessler wrote:

> I am trying to make a site that will hold some sensitive information  
> that I would like to have at least minimal encryption on some of my  
> CCK fields. Is there an easy way to encrypt CCK text fields? I would  
> need to display the un-encrypted values when the nodes were viewed  
> by users with the correct permissions.
>
> Thanks,
> Steve
>
>
> Steve Kessler
> Denver DataMan
> 303-587-4428
> Sign up for the Denver DataMan Free eNewsletter
>
> -- 
> [ Drupal support list | http://lists.drupal.org/ ]



More information about the support mailing list