[support] Encrypting CCK Data

Gordon Heydon gordon at heydon.com.au
Tue Feb 3 23:40:50 UTC 2009


Hi,

MD5 is not an encryption it is a hash., and it is only 1 way. So you  
can get the hash of a password, but you can't reverse that process.

Gordon.

On 04/02/2009, at 10:26 AM, Steve Kessler wrote:

> I am a little confused. How is this done with passwords using MD5? I  
> would
> happy with MD5 encryption. I would love to understand this if I am  
> missing
> something.
>
> Thanks,
> Steve
>
> Steve Kessler
> Denver DataMan
> 303-587-4428
> Sign up for the Denver DataMan Free eNewsletter
>
>
> -----Original Message-----
> From: Gordon Heydon [mailto:gordon at heydon.com.au]
> Sent: Tuesday, February 03, 2009 4:05 PM
> To: support at drupal.org
> Subject: Re: [support] Encrypting CCK Data
>
> HI,
>
> Because of how PHP works is is not really possible to encrypt data
> within the Drupal database.
>
> basically the problem is that to encrypt and decrypt the data you will
> need the private key, so any person who wants to find decrypt the data
> will most likely have full access to the private key and all the code
> to decrypt it. Even to the point of just calling directly the same php
> code to get the get the clear text.
>
> I would love to be able to do this for e-Commerce, but there is no way
> to keep it 100% safe. If they have access to the database, the rest is
> available to get the clear text version.
>
> Gordon.
>
> On 04/02/2009, at 5:56 AM, Steve Kessler wrote:
>
>> I am trying to make a site that will hold some sensitive information
>> that I would like to have at least minimal encryption on some of my
>> CCK fields. Is there an easy way to encrypt CCK text fields? I would
>> need to display the un-encrypted values when the nodes were viewed
>> by users with the correct permissions.
>>
>> Thanks,
>> Steve
>>
>>
>> Steve Kessler
>> Denver DataMan
>> 303-587-4428
>> Sign up for the Denver DataMan Free eNewsletter
>>
>> -- 
>> [ Drupal support list | http://lists.drupal.org/ ]
>
> -- 
> [ Drupal support list | http://lists.drupal.org/ ]
>
> -- 
> [ Drupal support list | http://lists.drupal.org/ ]



More information about the support mailing list