[support] Encrypting CCK Data

[Steve Kessler]

I am a little confused. How is this done with passwords using MD5? I would
happy with MD5 encryption. I would love to understand this if I am missing
something.

Thanks,
Steve

Steve Kessler 
Denver DataMan 
303-587-4428 
Sign up for the Denver DataMan Free eNewsletter


-----Original Message-----
From: Gordon Heydon [mailto:gordon at heydon.com.au] 
Sent: Tuesday, February 03, 2009 4:05 PM
To: support at drupal.org
Subject: Re: [support] Encrypting CCK Data

HI,

Because of how PHP works is is not really possible to encrypt data  
within the Drupal database.

basically the problem is that to encrypt and decrypt the data you will  
need the private key, so any person who wants to find decrypt the data  
will most likely have full access to the private key and all the code  
to decrypt it. Even to the point of just calling directly the same php  
code to get the get the clear text.

I would love to be able to do this for e-Commerce, but there is no way  
to keep it 100% safe. If they have access to the database, the rest is  
available to get the clear text version.

Gordon.

On 04/02/2009, at 5:56 AM, Steve Kessler wrote:

> I am trying to make a site that will hold some sensitive information  
> that I would like to have at least minimal encryption on some of my  
> CCK fields. Is there an easy way to encrypt CCK text fields? I would  
> need to display the un-encrypted values when the nodes were viewed  
> by users with the correct permissions.
>
> Thanks,
> Steve
>
>
> Steve Kessler
> Denver DataMan
> 303-587-4428
> Sign up for the Denver DataMan Free eNewsletter
>
> -- 
> [ Drupal support list | http://lists.drupal.org/ ]

-- 
[ Drupal support list | http://lists.drupal.org/ ]