blocks|key|191063|text|type|unstyled|depth|inlineStyleRanges|entityRanges|data|191064|+历史注释：这是在PHP4出现的时候写的。这就是我们现在所说的“遗留代码”。|blockquote|offset|length|style|BOLD|191065|191066|191067|出于历史的目的，我留下了这个答案--但是其中一些方法现在已被弃用，DES加密方法不是推荐的做法，等等。|191068|我没有更新这段代码有两个原因:+1)我不再在PHP中手动使用加密方法，2)这段代码仍然用于它的目的:演示PHP中加密如何工作的最小、最简单的概念。|191069|如果你找到一个类似的简单的，"PHP加密假人“类型的源代码，可以让人们在10-20行或更少的代码开始，让我在评论中知道。|191070|除此之外，请欣赏这个早期PHP4简约加密答案的经典插曲。|191071|191072|理想情况下，您可以-或者可以-访问mcrypt+PHP库，因为它肯定很受欢迎，并且在各种任务中都非常有用。下面是不同类型的加密的概要和一些示例代码：Encryption+Techniques+in+PHP|191073|//Listing+3:+Encrypting+Data+Using+the+mcrypt_ecb+Function+

<?php+
echo("<h3>+Symmetric+Encryption+</h3>");+
$key_value+=+"KEYVALUE";+
$plain_text+=+"PLAINTEXT";+
$encrypted_text+=+mcrypt_ecb(MCRYPT_DES,+$key_value,+$plain_text,+MCRYPT_ENCRYPT);+
echo+("+Text+after+encryption+:+");+
echo+(+$encrypted_text+);+
$decrypted_text+=+mcrypt_ecb(MCRYPT_DES,+$key_value,+$encrypted_text,+MCRYPT_DECRYPT);+
echo+("+Text+after+decryption+:+");+
echo+(+$decrypted_text+);+
?>+|code-block|syntax|javascript|191074|以下是一些警告：|191075|1)当单向散列可以时，永远不要使用可逆或“对称”加密。|191076|2)如果数据真的很敏感，比如信用卡或社保号码，就停下来；你需要的不仅仅是简单的代码块，而是一个专门为此目的而设计的加密库，以及大量的时间来研究必要的方法。此外，软件加密可能小于敏感数据安全性的10%25。这就像给一座核电站重新布线--接受这项任务是危险和困难的，如果是这样的话，这是你所不知道的。经济上的惩罚可能是巨大的，所以最好使用服务，并将责任交给他们。|191077|3)这里列出的任何一种易于实现的加密，都可以合理地保护您想要防止被窥探的轻度重要信息，或者在意外/故意泄漏的情况下限制暴露。但是考虑到密钥是如何以明文形式存储在web服务器上的，如果他们能够获得数据，他们就可以获得解密密钥。|191078|尽管如此，请尽情享受吧:)|191079|entityMap|0|LINK|mutability|MUTABLE|url|http://www.osix.net/modules/article/?id=606^0|0|1|5|0|0|0|0|0|0|0|0|22|S|0|0|0|0|0|0|0|0^^$0|@$1|2|3|-4|4|5|6|1H|7|@]|8|@]|9|$]]|$1|A|3|B|4|C|6|1I|7|@$D|1J|E|1K|F|G]]|8|@]|9|$]]|$1|H|3|-4|4|5|6|1L|7|@]|8|@]|9|$]]|$1|I|3|-4|4|5|6|1M|7|@]|8|@]|9|$]]|$1|J|3|K|4|5|6|1N|7|@]|8|@]|9|$]]|$1|L|3|M|4|5|6|1O|7|@]|8|@]|9|$]]|$1|N|3|O|4|5|6|1P|7|@]|8|@]|9|$]]|$1|P|3|Q|4|5|6|1Q|7|@]|8|@]|9|$]]|$1|R|3|-4|4|5|6|1R|7|@]|8|@]|9|$]]|$1|S|3|T|4|5|6|1S|7|@]|8|@$D|1T|E|1U|1|1V]]|9|$]]|$1|U|3|V|4|W|6|1W|7|@]|8|@]|9|$X|Y]]|$1|Z|3|10|4|5|6|1X|7|@]|8|@]|9|$]]|$1|11|3|12|4|5|6|1Y|7|@]|8|@]|9|$]]|$1|13|3|14|4|5|6|1Z|7|@]|8|@]|9|$]]|$1|15|3|16|4|5|6|20|7|@]|8|@]|9|$]]|$1|17|3|18|4|5|6|21|7|@]|8|@]|9|$]]|$1|19|3|-4|4|5|6|22|7|@]|8|@]|9|$]]]|1A|$1B|$4|1C|1D|1E|9|$1F|1G]]]]

<blockquote>
 Historical Note: This was written at the time of PHP4. This is what we call "legacy code" now.
</blockquote>

I have left this answer for historical purposes - but some of the methods are now deprecated, DES encryption method is not a recommended practice, etc.

I have not updated this code for two reasons: 1) I no longer work with encryption methods by hand in PHP, and 2) this code still serves the purpose it was intended for: to demonstrate the minimum, simplistic concept of how encryption can work in PHP. 

If you find a similarly simplistic, "PHP encryption for dummies" kind of source that can get people started in 10-20 lines of code or less, let me know in comments.

Beyond that, please enjoy this Classic Episode of early-era PHP4 minimalistic encryption answer.

<hr>

Ideally you have - or can get - access to the mcrypt PHP library, as its certainly popular and very useful a variety of tasks. Here's a run down of the different kinds of encryption and some example code: <a href="http://www.osix.net/modules/article/?id=606" rel="nofollow">Encryption Techniques in PHP</a>

<pre><code>//Listing 3: Encrypting Data Using the mcrypt_ecb Function 

&lt;?php 
echo("&lt;h3&gt; Symmetric Encryption &lt;/h3&gt;"); 
$key_value = "KEYVALUE"; 
$plain_text = "PLAINTEXT"; 
$encrypted_text = mcrypt_ecb(MCRYPT_DES, $key_value, $plain_text, MCRYPT_ENCRYPT); 
echo ("&lt;p&gt;&lt;b&gt; Text after encryption : &lt;/b&gt;"); 
echo ( $encrypted_text ); 
$decrypted_text = mcrypt_ecb(MCRYPT_DES, $key_value, $encrypted_text, MCRYPT_DECRYPT); 
echo ("&lt;p&gt;&lt;b&gt; Text after decryption : &lt;/b&gt;"); 
echo ( $decrypted_text ); 
?&gt; 
</code></pre>

A few warnings:

1) Never use reversible, or "symmetric" encryption when a one-way hash will do.

2) If the data is truly sensitive, like credit card or social security numbers, stop; you need more than any simple chunk of code will provide, but rather you need a crypto library designed for this purpose and a significant amount of time to research the methods necessary. Further, the software crypto is probably &lt;10% of security of sensitive data. It's like rewiring a nuclear power station - accept that the task is dangerous and difficult and beyond your knowledge if that's the case. The financial penalties can be immense, so better to use a service and ship responsibility to them.

3) Any sort of easily implementable encryption, as listed here, can reasonably protect mildly important information that you want to keep from prying eyes or limit exposure in the case of accidental/intentional leak. But seeing as how the key is stored in plain text on the web server, if they can get the data they can get the decryption key.

Be that as it may, have fun :)

blocks|key|188287|text|不能做的事情|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|188288|188289|+警告：|blockquote|188290|188291|此答案使用+。ECB不是一种加密模式，它只是一个构建块。如本答案所示，使用ECB实际上并不能安全地加密字符串。不要在您的代码中使用ECB。有关好的解决方案，请参阅++。|188292|188293|是我自己弄的。实际上，我在谷歌上找到了一些答案，只是做了一些修改。但是，结果是完全不安全的。|188294|<?php
define("ENCRYPTION_KEY",+"!@#$%25%5E&*");
$string+=+"This+is+the+original+data+string!";

echo+$encrypted+=+encrypt($string,+ENCRYPTION_KEY);
echo+"<br+/>";
echo+$decrypted+=+decrypt($encrypted,+ENCRYPTION_KEY);

/**
+*+Returns+an+encrypted+&+utf8-encoded
+*/
function+encrypt($pure_string,+$encryption_key)+{
++++$iv_size+=+mcrypt_get_iv_size(MCRYPT_BLOWFISH,+MCRYPT_MODE_ECB);
++++$iv+=+mcrypt_create_iv($iv_size,+MCRYPT_RAND);
++++$encrypted_string+=+mcrypt_encrypt(MCRYPT_BLOWFISH,+$encryption_key,+utf8_encode($pure_string),+MCRYPT_MODE_ECB,+$iv);
++++return+$encrypted_string;
}

/**
+*+Returns+decrypted+original+string
+*/
function+decrypt($encrypted_string,+$encryption_key)+{
++++$iv_size+=+mcrypt_get_iv_size(MCRYPT_BLOWFISH,+MCRYPT_MODE_ECB);
++++$iv+=+mcrypt_create_iv($iv_size,+MCRYPT_RAND);
++++$decrypted_string+=+mcrypt_decrypt(MCRYPT_BLOWFISH,+$encryption_key,+$encrypted_string,+MCRYPT_MODE_ECB,+$iv);
++++return+$decrypted_string;
}
?>|code-block|syntax|javascript|188295|entityMap^0|0|6|0|0|1|3|0|0|0|5|6|23|2B|1|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]|$1|G|3|H|5|I|7|10|8|@$9|11|A|12|B|C]]|D|@]|E|$]]|$1|J|3|-4|5|6|7|13|8|@]|D|@]|E|$]]|$1|K|3|L|5|6|7|14|8|@$9|15|A|16|B|C]|$9|17|A|18|B|C]|$9|19|A|1A|B|C]]|D|@]|E|$]]|$1|M|3|-4|5|6|7|1B|8|@]|D|@]|E|$]]|$1|N|3|O|5|6|7|1C|8|@]|D|@]|E|$]]|$1|P|3|Q|5|R|7|1D|8|@]|D|@]|E|$S|T]]|$1|U|3|-4|5|6|7|1E|8|@]|D|@]|E|$]]]|V|$]]

What not to do

<blockquote>
 WARNING: 
 This answer uses <a href="https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#ECB" rel="nofollow">ECB</a>. ECB is not an encryption mode, it's only a building block. Using ECB as demonstrated in this answer does not actually encrypt the string securely. Do not use ECB in your code. See <a href="https://stackoverflow.com/a/30159120">Scott's answer</a> for a good solution.
</blockquote>

I got it on myself. Actually i found some answer on google and just modified something. The result is completely insecure however.

<pre><code>&lt;?php
define("ENCRYPTION_KEY", "!@#$%^&amp;*");
$string = "This is the original data string!";

echo $encrypted = encrypt($string, ENCRYPTION_KEY);
echo "&lt;br /&gt;";
echo $decrypted = decrypt($encrypted, ENCRYPTION_KEY);

/**
 * Returns an encrypted &amp; utf8-encoded
 */
function encrypt($pure_string, $encryption_key) {
 $iv_size = mcrypt_get_iv_size(MCRYPT_BLOWFISH, MCRYPT_MODE_ECB);
 $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
 $encrypted_string = mcrypt_encrypt(MCRYPT_BLOWFISH, $encryption_key, utf8_encode($pure_string), MCRYPT_MODE_ECB, $iv);
 return $encrypted_string;
}

/**
 * Returns decrypted original string
 */
function decrypt($encrypted_string, $encryption_key) {
 $iv_size = mcrypt_get_iv_size(MCRYPT_BLOWFISH, MCRYPT_MODE_ECB);
 $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
 $decrypted_string = mcrypt_decrypt(MCRYPT_BLOWFISH, $encryption_key, $encrypted_string, MCRYPT_MODE_ECB, $iv);
 return $decrypted_string;
}
?&gt;
</code></pre>

blocks|key|188803|text|在做进一步的工作之前，请先了解the+difference+between++and+，以及为什么您可能需要经过身份验证的加密，而不只是加密。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|188804|要实现经过身份验证的加密，您需要先加密MAC。这个问题的现有答案之一The+order+of+encryption+and+authentication+is+very+important!犯了这个错误；许多用PHP语言编写的密码库也是如此。|188805|您应该使用avoid+implementing+your+own+cryptography，而不是使用由密码学专家编写和审查的安全库。|188806|188807|+更新:PHP7.2现在提供Update！为了获得最好的安全性，请将您的系统更新为使用PHP+7.2或更高版本，并且只遵循此答案中的higher建议。|blockquote|style|BOLD|188808|188809|188810|+(如果您想要不带PECL的without，则为++)；否则...|188811|；不要使用自己的加密技术！|188812|上面链接的两个库都使得在您自己的库中实现经过身份验证的加密变得简单而轻松。|188813|如果您仍然想要编写和部署您自己的密码库，而不是Internet上每个密码学专家的传统智慧，那么这些是您必须采取的步骤。|188814|加密：|188815|在CTR模式下使用AES进行|188816|加密。您也可以使用GCM+(这样就不需要单独的MAC了)。此外，ChaCha20和Salsa20+(由libsodium提供)是流密码，不需要特殊的modes.|ordered-list-item|188817|Unless。如果您在上面选择了GCM，则应该使用HMAC-SHA-256对密文进行身份验证(或者，对于流密码，Poly1305+--大多数libsodium会为您做这件事)。媒体访问控制应覆盖IV和ciphertext!|188818|188819|解密：|188820|188821|除非使用Poly1305或GCM，否则请重新计算密文的，并将其与使用hash_equals()发送的MAC进行比较。如果失败，则使用abort.|CODE|188822|Decrypt发送消息。|188823|188824|188825|其他设计注意事项：|188826|188827|永远不会压缩任何内容。密文是不可压缩的；在加密之前压缩明文可能导致信息泄漏(例如，TLS上的犯罪和违规)。|188828|确保您使用mb_strlen()和mb_substr()，使用'8bit'字符集模式来防止mbstring.func_overload问题。|188829|+is应该使用CSPRNG生成；如果您使用的是D43CSPRNG>，请勿使用|188830|unordered-list-item|188831|188832|188833|除非您正在使用AEAD结构、|188834|bin2hex()，|188835|
|188836|等，否则|188837|可能会通过缓存计时泄露有关加密密钥的信息。如果可能，请避免使用它们。|188838|188839|188840|即使你遵循了这里给出的建议，密码学也会出很多问题。总是有一位密码学专家审查你的实现。如果你不够幸运地和你当地大学的密码学学生成为私人朋友，你总是可以尝试Cryptography+Stack+Exchange论坛寻求建议。|188841|如果你需要对你的实现进行专业的分析，你可以雇佣一个reputable+team+of+security+consultants+to+review+your+PHP+cryptography+code+(披露:我的雇主)。|188842|重要提示:何时不使用加密|188843|+。您希望使用以下密码散列算法之一对它们进行散列：|188844|188845|Argon2|188846|scrypt|188847|bcrypt|188848|PBKDF2-SHA256+with+86,000+iterations|188849|188850|切勿使用通用散列函数(MD5、SHA256)存储密码。|188851|.这工具不适合这项工作。|188852|使用String的PHP字符串加密示例|188853|如果你使用的是PHP+<+7.2或者没有安装slower，你可以使用sodium_compat来达到同样的效果(尽管速度较慢)。|188854|<?php
declare(strict_types=1);

/**
+*+Encrypt+a+message
+*+
+*+@param+string+$message+-+message+to+encrypt
+*+@param+string+$key+-+encryption+key
+*+@return+string
+*+@throws+RangeException
+*/
function+safeEncrypt(string+$message,+string+$key):+string
{
++++if+(mb_strlen($key,+'8bit')+!==+SODIUM_CRYPTO_SECRETBOX_KEYBYTES)+{
++++++++throw+new+RangeException('Key+is+not+the+correct+size+(must+be+32+bytes).');
++++}
++++$nonce+=+random_bytes(SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
++++
++++$cipher+=+base64_encode(
++++++++$nonce.
++++++++sodium_crypto_secretbox(
++++++++++++$message,
++++++++++++$nonce,
++++++++++++$key
++++++++)
++++);
++++sodium_memzero($message);
++++sodium_memzero($key);
++++return+$cipher;
}

/**
+*+Decrypt+a+message
+*+
+*+@param+string+$encrypted+-+message+encrypted+with+safeEncrypt()
+*+@param+string+$key+-+encryption+key
+*+@return+string
+*+@throws+Exception
+*/
function+safeDecrypt(string+$encrypted,+string+$key):+string
{+++
++++$decoded+=+base64_decode($encrypted);
++++$nonce+=+mb_substr($decoded,+0,+SODIUM_CRYPTO_SECRETBOX_NONCEBYTES,+'8bit');
++++$ciphertext+=+mb_substr($decoded,+SODIUM_CRYPTO_SECRETBOX_NONCEBYTES,+null,+'8bit');
++++
++++$plain+=+sodium_crypto_secretbox_open(
++++++++$ciphertext,
++++++++$nonce,
++++++++$key
++++);
++++if+(!is_string($plain))+{
++++++++throw+new+Exception('Invalid+MAC');
++++}
++++sodium_memzero($ciphertext);
++++sodium_memzero($key);
++++return+$plain;
}|code-block|syntax|javascript|188855|然后进行测试：|188856|<?php
//+This+refers+to+the+previous+code+block.
require+"safeCrypto.php";+

//+Do+this+once+then+store+it+somehow:
$key+=+random_bytes(SODIUM_CRYPTO_SECRETBOX_KEYBYTES);
$message+=+'We+are+all+living+in+a+yellow+submarine';

$ciphertext+=+safeEncrypt($message,+$key);
$plaintext+=+safeDecrypt($ciphertext,+$key);

var_dump($ciphertext);
var_dump($plaintext);|188857|使Halite+-Halite变得更容易|188858|我一直在做的一个项目是一个名为Halite的加密库，它旨在使library更容易和更直观。|188859|<?php
use+\ParagonIE\Halite\KeyFactory;
use+\ParagonIE\Halite\Symmetric\Crypto+as+SymmetricCrypto;

//+Generate+a+new+random+symmetric-key+encryption+key.+You're+going+to+want+to+store+this:
$key+=+new+KeyFactory::generateEncryptionKey();
//+To+save+your+encryption+key:
KeyFactory::save($key,+'/path/to/secret.key');
//+To+load+it+again:
$loadedkey+=+KeyFactory::loadEncryptionKey('/path/to/secret.key');

$message+=+'We+are+all+living+in+a+yellow+submarine';
$ciphertext+=+SymmetricCrypto::encrypt($message,+$key);
$plaintext+=+SymmetricCrypto::decrypt($ciphertext,+$key);

var_dump($ciphertext);
var_dump($plaintext);|188860|所有的底层加密都是由libsodium处理的。|188861|使用defuse/php-encryption的示例|188862|<?php
/**
+*+This+requires+https://github.com/defuse/php-encryption
+*+php+composer.phar+require+defuse/php-encryption
+*/

use+Defuse\Crypto\Crypto;
use+Defuse\Crypto\Key;

require+"vendor/autoload.php";

//+Do+this+once+then+store+it+somehow:
$key+=+Key::createNewRandomKey();

$message+=+'We+are+all+living+in+a+yellow+submarine';

$ciphertext+=+Crypto::encrypt($message,+$key);
$plaintext+=+Crypto::decrypt($ciphertext,+$key);

var_dump($ciphertext);
var_dump($plaintext);|188863|注意：：Crypto::encrypt()返回十六进制编码的输出。|188864|加密密钥管理|188865|如果你想使用“密码”，现在就停止吧。您需要一个随机的128位加密密钥，而不是人类难忘的密码。|188866|您可以存储加密密钥以供长期使用，如下所示：|188867|$storeMe+=+bin2hex($key);|188868|并且，根据需要，您可以像这样检索它：|188869|$key+=+hex2bin($storeMe);|188870|我强烈建议只存储一个随机生成的密钥供长期使用，而不是将任何类型的密码作为密钥(或派生密钥)。|188871|如果您使用的是Defuse的库：|188872|188873|$string+=+$keyObject->saveToAsciiSafeString()|188874|$loaded+=+Key::loadFromAsciiSafeString($string);|188875|188876|“但我真的想使用密码。”|188877|这不是一个好主意，但好吧，这里是如何安全地做它。|188878|首先，生成一个随机密钥并将其存储在一个常量中。|188879|/**
+*+Replace+this+with+your+own+salt!+
+*+Use+bin2hex()+then+add+\x+before+every+2+hex+characters,+like+so:
+*/
define('MY_PBKDF2_SALT',+"\x2d\xb7\x68\x1a\x28\x15\xbe\x06\x33\xa0\x7e\x0e\x8f\x79\xd5\xdf");|188880|请注意，您正在添加额外的工作，并且可以使用此常量作为键，从而省去了许多心痛！|188881|然后使用PBKDF2+(如下所示)从您的密码派生合适的加密密钥，而不是直接使用您的密码进行加密。|188882|/**
+*+Get+an+AES+key+from+a+static+password+and+a+secret+salt
+*+
+*+@param+string+$password+Your+weak+password+here
+*+@param+int+$keysize+Number+of+bytes+in+encryption+key
+*/
function+getKeyFromPassword($password,+$keysize+=+16)
{
++++return+hash_pbkdf2(
++++++++'sha256',
++++++++$password,
++++++++MY_PBKDF2_SALT,
++++++++100000,+//+Number+of+iterations
++++++++$keysize,
++++++++true
++++);
}|188883|不要只使用16个字符的密码。你的加密密钥会被滑稽地破解。|188884|entityMap|0|LINK|mutability|MUTABLE|url|https://paragonie.com/blog/2015/05/using-encryption-and-authentication-correctly|1|http://www.thoughtcrime.org/blog/the-cryptographic-doom-principle/|2|http://www.cryptofails.com/post/75204435608/write-crypto-code-dont-publish-it|3|https://github.com/jedisct1/libsodium-php|4|https://php.net/manual/en/function.hash-equals.php|5|http://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/|6|http://crypto.stackexchange.com/|7|https://paragonie.com/service/code-review|8|https://paragonie.com/blog/2015/08/you-wouldnt-base64-a-password-cryptography-decoded|9|https://password-hashing.net/#argon2|10|https://security.stackexchange.com/a/26253/43688|11|http://codahale.com/how-to-safely-store-a-password|12|https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2015/march/enough-with-the-salts-updates-on-secure-password-schemes|13|https://github.com/paragonie/sodium_compat|14|https://paragonie.com/project/halite|15|https://github.com/defuse/php-encryption/blob/master/docs/classes/Key.md#savetoasciisafestring|16|https://github.com/defuse/php-encryption/blob/master/docs/classes/Key.md#keyloadfromasciisafestringsaved_key_string-do_not_trim--false^0|F|S|0|0|Y|1P|1|0|5|14|2|0|0|1|J|0|0|0|1|N|Q|7|0|0|D|0|0|0|0|0|1F|9|3|0|2G|N|0|0|0|0|Y|D|Y|D|4|1|1|0|0|0|0|0|5|B|H|B|V|6|19|M|0|Y|4|7|6|5|1|1|0|0|0|0|9|0|0|0|0|0|0|P|H|24|R|6|0|P|23|7|0|0|0|1|8|0|0|0|6|9|0|0|6|A|0|0|6|B|0|0|10|C|0|0|0|0|1|0|0|Y|D|D|0|0|0|0|0|F|6|E|0|0|0|0|0|0|3|4|H|0|0|0|0|0|0|0|0|0|0|0|19|0|19|F|0|0|1C|0|1C|G|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|5P|8|@]|9|@$A|5Q|B|5R|1|5S]]|C|$]]|$1|D|3|E|5|6|7|5T|8|@]|9|@$A|5U|B|5V|1|5W]]|C|$]]|$1|F|3|G|5|6|7|5X|8|@]|9|@$A|5Y|B|5Z|1|60]]|C|$]]|$1|H|3|-4|5|6|7|61|8|@]|9|@]|C|$]]|$1|I|3|J|5|K|7|62|8|@$A|63|B|64|L|M]]|9|@]|C|$]]|$1|N|3|-4|5|6|7|65|8|@]|9|@]|C|$]]|$1|O|3|-4|5|6|7|66|8|@]|9|@]|C|$]]|$1|P|3|Q|5|6|7|67|8|@$A|68|B|69|L|M]|$A|6A|B|6B|L|M]]|9|@]|C|$]]|$1|R|3|S|5|6|7|6C|8|@$A|6D|B|6E|L|M]]|9|@]|C|$]]|$1|T|3|U|5|6|7|6F|8|@]|9|@]|C|$]]|$1|V|3|W|5|6|7|6G|8|@]|9|@]|C|$]]|$1|X|3|Y|5|6|7|6H|8|@]|9|@]|C|$]]|$1|Z|3|10|5|6|7|6I|8|@]|9|@]|C|$]]|$1|11|3|12|5|13|7|6J|8|@]|9|@$A|6K|B|6L|1|6M]]|C|$]]|$1|14|3|15|5|13|7|6N|8|@$A|6O|B|6P|L|M]]|9|@]|C|$]]|$1|16|3|-4|5|6|7|6Q|8|@]|9|@]|C|$]]|$1|17|3|18|5|6|7|6R|8|@]|9|@]|C|$]]|$1|19|3|-4|5|6|7|6S|8|@]|9|@]|C|$]]|$1|1A|3|1B|5|13|7|6T|8|@$A|6U|B|6V|L|1C]]|9|@$A|6W|B|6X|1|6Y]]|C|$]]|$1|1D|3|1E|5|13|7|6Z|8|@]|9|@]|C|$]]|$1|1F|3|-4|5|6|7|70|8|@]|9|@]|C|$]]|$1|1G|3|-4|5|6|7|71|8|@]|9|@]|C|$]]|$1|1H|3|1I|5|6|7|72|8|@]|9|@]|C|$]]|$1|1J|3|-4|5|6|7|73|8|@]|9|@]|C|$]]|$1|1K|3|1L|5|13|7|74|8|@]|9|@]|C|$]]|$1|1M|3|1N|5|13|7|75|8|@$A|76|B|77|L|1C]|$A|78|B|79|L|1C]|$A|7A|B|7B|L|1C]|$A|7C|B|7D|L|1C]]|9|@]|C|$]]|$1|1O|3|1P|5|13|7|7E|8|@$A|7F|B|7G|L|M]]|9|@$A|7H|B|7I|1|7J]]|C|$]]|$1|1Q|3|-4|5|1R|7|7K|8|@]|9|@]|C|$]]|$1|1S|3|-4|5|6|7|7L|8|@]|9|@]|C|$]]|$1|1T|3|-4|5|6|7|7M|8|@]|9|@]|C|$]]|$1|1U|3|1V|5|6|7|7N|8|@]|9|@]|C|$]]|$1|1W|3|1X|5|1R|7|7O|8|@$A|7P|B|7Q|L|1C]]|9|@]|C|$]]|$1|1Y|3|1Z|5|6|7|7R|8|@]|9|@]|C|$]]|$1|20|3|21|5|1R|7|7S|8|@]|9|@]|C|$]]|$1|22|3|23|5|13|7|7T|8|@]|9|@]|C|$]]|$1|24|3|-4|5|6|7|7U|8|@]|9|@]|C|$]]|$1|25|3|-4|5|6|7|7V|8|@]|9|@]|C|$]]|$1|26|3|27|5|6|7|7W|8|@$A|7X|B|7Y|L|M]]|9|@$A|7Z|B|80|1|81]]|C|$]]|$1|28|3|29|5|6|7|82|8|@]|9|@$A|83|B|84|1|85]]|C|$]]|$1|2A|3|2B|5|6|7|86|8|@]|9|@]|C|$]]|$1|2C|3|2D|5|6|7|87|8|@]|9|@$A|88|B|89|1|8A]]|C|$]]|$1|2E|3|-4|5|6|7|8B|8|@]|9|@]|C|$]]|$1|2F|3|2G|5|1R|7|8C|8|@]|9|@$A|8D|B|8E|1|8F]]|C|$]]|$1|2H|3|2I|5|1R|7|8G|8|@]|9|@$A|8H|B|8I|1|8J]]|C|$]]|$1|2J|3|2K|5|1R|7|8K|8|@]|9|@$A|8L|B|8M|1|8N]]|C|$]]|$1|2L|3|2M|5|1R|7|8O|8|@]|9|@$A|8P|B|8Q|1|8R]]|C|$]]|$1|2N|3|-4|5|6|7|8S|8|@]|9|@]|C|$]]|$1|2O|3|2P|5|6|7|8T|8|@]|9|@]|C|$]]|$1|2Q|3|2R|5|6|7|8U|8|@$A|8V|B|8W|L|M]]|9|@]|C|$]]|$1|2S|3|2T|5|6|7|8X|8|@]|9|@]|C|$]]|$1|2U|3|2V|5|6|7|8Y|8|@]|9|@$A|8Z|B|90|1|91]]|C|$]]|$1|2W|3|2X|5|2Y|7|92|8|@]|9|@]|C|$2Z|30]]|$1|31|3|32|5|6|7|93|8|@]|9|@]|C|$]]|$1|33|3|34|5|2Y|7|94|8|@]|9|@]|C|$2Z|30]]|$1|35|3|36|5|6|7|95|8|@]|9|@]|C|$]]|$1|37|3|38|5|6|7|96|8|@]|9|@$A|97|B|98|1|99]]|C|$]]|$1|39|3|3A|5|2Y|7|9A|8|@]|9|@]|C|$2Z|30]]|$1|3B|3|3C|5|6|7|9B|8|@]|9|@]|C|$]]|$1|3D|3|3E|5|6|7|9C|8|@]|9|@]|C|$]]|$1|3F|3|3G|5|2Y|7|9D|8|@]|9|@]|C|$2Z|30]]|$1|3H|3|3I|5|6|7|9E|8|@$A|9F|B|9G|L|M]|$A|9H|B|9I|L|1C]]|9|@]|C|$]]|$1|3J|3|3K|5|6|7|9J|8|@]|9|@]|C|$]]|$1|3L|3|3M|5|6|7|9K|8|@]|9|@]|C|$]]|$1|3N|3|3O|5|6|7|9L|8|@]|9|@]|C|$]]|$1|3P|3|3Q|5|2Y|7|9M|8|@]|9|@]|C|$2Z|30]]|$1|3R|3|3S|5|6|7|9N|8|@]|9|@]|C|$]]|$1|3T|3|3U|5|2Y|7|9O|8|@]|9|@]|C|$2Z|30]]|$1|3V|3|3W|5|6|7|9P|8|@]|9|@]|C|$]]|$1|3X|3|3Y|5|6|7|9Q|8|@]|9|@]|C|$]]|$1|3Z|3|-4|5|6|7|9R|8|@]|9|@]|C|$]]|$1|40|3|41|5|1R|7|9S|8|@$A|9T|B|9U|L|1C]]|9|@$A|9V|B|9W|1|9X]]|C|$]]|$1|42|3|43|5|1R|7|9Y|8|@$A|9Z|B|A0|L|1C]]|9|@$A|A1|B|A2|1|A3]]|C|$]]|$1|44|3|-4|5|6|7|A4|8|@]|9|@]|C|$]]|$1|45|3|46|5|6|7|A5|8|@]|9|@]|C|$]]|$1|47|3|48|5|6|7|A6|8|@]|9|@]|C|$]]|$1|49|3|4A|5|6|7|A7|8|@]|9|@]|C|$]]|$1|4B|3|4C|5|2Y|7|A8|8|@]|9|@]|C|$2Z|30]]|$1|4D|3|4E|5|6|7|A9|8|@]|9|@]|C|$]]|$1|4F|3|4G|5|6|7|AA|8|@]|9|@]|C|$]]|$1|4H|3|4I|5|2Y|7|AB|8|@]|9|@]|C|$2Z|30]]|$1|4J|3|4K|5|6|7|AC|8|@]|9|@]|C|$]]|$1|4L|3|-4|5|6|7|AD|8|@]|9|@]|C|$]]]|4M|$4N|$5|4O|4P|4Q|C|$4R|4S]]|4T|$5|4O|4P|4Q|C|$4R|4U]]|4V|$5|4O|4P|4Q|C|$4R|4W]]|4X|$5|4O|4P|4Q|C|$4R|4Y]]|4Z|$5|4O|4P|4Q|C|$4R|50]]|51|$5|4O|4P|4Q|C|$4R|52]]|53|$5|4O|4P|4Q|C|$4R|54]]|55|$5|4O|4P|4Q|C|$4R|56]]|57|$5|4O|4P|4Q|C|$4R|58]]|59|$5|4O|4P|4Q|C|$4R|5A]]|5B|$5|4O|4P|4Q|C|$4R|5C]]|5D|$5|4O|4P|4Q|C|$4R|5E]]|5F|$5|4O|4P|4Q|C|$4R|5G]]|5H|$5|4O|4P|4Q|C|$4R|5I]]|5J|$5|4O|4P|4Q|C|$4R|5K]]|5L|$5|4O|4P|4Q|C|$4R|5M]]|5N|$5|4O|4P|4Q|C|$4R|5O]]]]

Before you do anything further, seek to understand <a href="https://paragonie.com/blog/2015/05/using-encryption-and-authentication-correctly" rel="noreferrer">the difference between encryption and authentication</a>, and why you probably want authenticated encryption rather than just encryption.
To implement authenticated encryption, you want to Encrypt then MAC. <a href="http://www.thoughtcrime.org/blog/the-cryptographic-doom-principle/" rel="noreferrer">The order of encryption and authentication is very important!</a> One of the existing answers to this question made this mistake; as do many cryptography libraries written in PHP.
You should <a href="http://www.cryptofails.com/post/75204435608/write-crypto-code-dont-publish-it" rel="noreferrer">avoid implementing your own cryptography</a>, and instead use a secure library written by and reviewed by cryptography experts.
<blockquote>
Update: PHP 7.2 now provides libsodium! For best security, update your systems to use PHP 7.2 or higher and only follow the libsodium advice in this answer.
</blockquote>
<a href="https://github.com/jedisct1/libsodium-php" rel="noreferrer">Use libsodium if you have PECL access</a> (or <a href="https://github.com/paragonie/sodium_compat" rel="noreferrer">sodium_compat</a> if you want libsodium without PECL); otherwise... 
<a href="https://github.com/defuse/php-encryption/" rel="noreferrer">Use defuse/php-encryption</a>; don't roll your own cryptography!
Both of the libraries linked above make it easy and painless to implement authenticated encryption into your own libraries.
If you still want to write and deploy your own cryptography library, against the conventional wisdom of every cryptography expert on the Internet, these are the steps you would have to take.
<h1>Encryption:</h1>
<ol>
<li>Encrypt using AES in CTR mode. You may also use GCM (which removes the need for a separate MAC). Additionally, ChaCha20 and Salsa20 (provided by <a href="https://github.com/jedisct1/libsodium-php" rel="noreferrer">libsodium</a>) are stream ciphers and do not need special modes.</li>
<li>Unless you chose GCM above, you should authenticate the ciphertext with HMAC-SHA-256 (or, for the stream ciphers, Poly1305 -- most libsodium APIs do this for you). The MAC should cover the IV as well as the ciphertext!</li>
</ol>
<h1>Decryption:</h1>
<ol>
<li>Unless Poly1305 or GCM is used, recalculate the MAC of the ciphertext and compare it with the MAC that was sent using <a href="https://php.net/manual/en/function.hash-equals.php" rel="noreferrer"><code>hash_equals()</code></a>. If it fails, abort.</li>
<li>Decrypt the message.</li>
</ol>
<h1>Other Design Considerations:</h1>
<ol>
<li>Do not compress anything ever. Ciphertext is not compressible; compressing plaintext before encryption can lead to information leaks (e.g. CRIME and BREACH on TLS).</li>
<li>Make sure you use <code>mb_strlen()</code> and <code>mb_substr()</code>, using the <code>'8bit'</code> character set mode to prevent <code>mbstring.func_overload</code> issues.</li>
<li>IVs should be generating using a <a href="http://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/" rel="noreferrer">CSPRNG</a>; If you're using <code>mcrypt_create_iv()</code>, DO NOT USE <code>MCRYPT_RAND</code>!
<ul>
<li>Also check out <a href="https://github.com/paragonie/random_compat" rel="noreferrer">random_compat</a>.</li>
</ul>
</li>
<li>Unless you're using an AEAD construct, <a href="http://www.thoughtcrime.org/blog/the-cryptographic-doom-principle" rel="noreferrer">ALWAYS encrypt then MAC!</a></li>
<li><code>bin2hex()</code>, <code>base64_encode()</code>, etc. may leak information about your encryption keys via cache timing. Avoid them if possible.</li>
</ol>
Even if you follow the advice given here, a lot can go wrong with cryptography. Always have a cryptography expert review your implementation. If you are not fortunate enough to be personal friends with a cryptography student at your local university, you can always try the <a href="http://crypto.stackexchange.com">Cryptography Stack Exchange</a> forum for advice.
If you need a professional analysis of your implementation, you can always hire a <a href="https://paragonie.com/service/code-review" rel="noreferrer">reputable team of security consultants to review your PHP cryptography code</a> (disclosure: my employer).
<h1>Important: When to Not Use Encryption</h1>
<a href="https://paragonie.com/blog/2015/08/you-wouldnt-base64-a-password-cryptography-decoded" rel="noreferrer">Don't encrypt passwords</a>. You want to hash them instead, using one of these password-hashing algorithms:
<ul>
<li><a href="https://password-hashing.net/#argon2" rel="noreferrer">Argon2</a></li>
<li><a href="https://security.stackexchange.com/a/26253/43688">scrypt</a></li>
<li><a href="http://codahale.com/how-to-safely-store-a-password" rel="noreferrer">bcrypt</a></li>
<li><a href="https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2015/march/enough-with-the-salts-updates-on-secure-password-schemes" rel="noreferrer">PBKDF2-SHA256 with 86,000 iterations</a></li>
</ul>
Never use a general-purpose hash function (MD5, SHA256) for password storage.
<a href="https://paragonie.com/blog/2015/09/comprehensive-guide-url-parameter-encryption-in-php" rel="noreferrer">Don't encrypt URL Parameters</a>. It's the wrong tool for the job.
<h1>PHP String Encryption Example with Libsodium</h1>
If you are on PHP &lt; 7.2 or otherwise do not have libsodium installed, you can use <a href="https://github.com/paragonie/sodium_compat" rel="noreferrer">sodium_compat</a> to accomplish the same result (albeit slower).
<pre><code>&lt;?php
declare(strict_types=1);

/**
 * Encrypt a message
 * 
 * @param string $message - message to encrypt
 * @param string $key - encryption key
 * @return string
 * @throws RangeException
 */
function safeEncrypt(string $message, string $key): string
{
 if (mb_strlen($key, '8bit') !== SODIUM_CRYPTO_SECRETBOX_KEYBYTES) {
 throw new RangeException('Key is not the correct size (must be 32 bytes).');
 }
 $nonce = random_bytes(SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
 
 $cipher = base64_encode(
 $nonce.
 sodium_crypto_secretbox(
 $message,
 $nonce,
 $key
 )
 );
 sodium_memzero($message);
 sodium_memzero($key);
 return $cipher;
}

/**
 * Decrypt a message
 * 
 * @param string $encrypted - message encrypted with safeEncrypt()
 * @param string $key - encryption key
 * @return string
 * @throws Exception
 */
function safeDecrypt(string $encrypted, string $key): string
{ 
 $decoded = base64_decode($encrypted);
 $nonce = mb_substr($decoded, 0, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES, '8bit');
 $ciphertext = mb_substr($decoded, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES, null, '8bit');
 
 $plain = sodium_crypto_secretbox_open(
 $ciphertext,
 $nonce,
 $key
 );
 if (!is_string($plain)) {
 throw new Exception('Invalid MAC');
 }
 sodium_memzero($ciphertext);
 sodium_memzero($key);
 return $plain;
}
</code></pre>
Then to test it out:
<pre><code>&lt;?php
// This refers to the previous code block.
require &quot;safeCrypto.php&quot;; 

// Do this once then store it somehow:
$key = random_bytes(SODIUM_CRYPTO_SECRETBOX_KEYBYTES);
$message = 'We are all living in a yellow submarine';

$ciphertext = safeEncrypt($message, $key);
$plaintext = safeDecrypt($ciphertext, $key);

var_dump($ciphertext);
var_dump($plaintext);
</code></pre>
<h2>Halite - Libsodium Made Easier</h2>
One of the projects I've been working on is an encryption library called <a href="https://paragonie.com/project/halite" rel="noreferrer">Halite</a>, which aims to make libsodium easier and more intuitive.
<pre><code>&lt;?php
use \ParagonIE\Halite\KeyFactory;
use \ParagonIE\Halite\Symmetric\Crypto as SymmetricCrypto;

// Generate a new random symmetric-key encryption key. You're going to want to store this:
$key = new KeyFactory::generateEncryptionKey();
// To save your encryption key:
KeyFactory::save($key, '/path/to/secret.key');
// To load it again:
$loadedkey = KeyFactory::loadEncryptionKey('/path/to/secret.key');

$message = 'We are all living in a yellow submarine';
$ciphertext = SymmetricCrypto::encrypt($message, $key);
$plaintext = SymmetricCrypto::decrypt($ciphertext, $key);

var_dump($ciphertext);
var_dump($plaintext);
</code></pre>
All of the underlying cryptography is handled by libsodium.
<h1>Example with defuse/php-encryption</h1>
<pre><code>&lt;?php
/**
 * This requires https://github.com/defuse/php-encryption
 * php composer.phar require defuse/php-encryption
 */

use Defuse\Crypto\Crypto;
use Defuse\Crypto\Key;

require &quot;vendor/autoload.php&quot;;

// Do this once then store it somehow:
$key = Key::createNewRandomKey();

$message = 'We are all living in a yellow submarine';

$ciphertext = Crypto::encrypt($message, $key);
$plaintext = Crypto::decrypt($ciphertext, $key);

var_dump($ciphertext);
var_dump($plaintext);
</code></pre>
Note: <code>Crypto::encrypt()</code> returns hex-encoded output.
<h3>Encryption Key Management</h3>
If you're tempted to use a &quot;password&quot;, stop right now. You need a random 128-bit encryption key, not a human memorable password.
You can store an encryption key for long-term use like so:
<pre><code>$storeMe = bin2hex($key);
</code></pre>
And, on demand, you can retrieve it like so:
<pre><code>$key = hex2bin($storeMe);
</code></pre>
I strongly recommend just storing a randomly generated key for long-term use instead of any sort of password as the key (or to derive the key).
If you're using Defuse's library:
<ul>
<li><a href="https://github.com/defuse/php-encryption/blob/master/docs/classes/Key.md#savetoasciisafestring" rel="noreferrer"><code>$string = $keyObject-&gt;saveToAsciiSafeString()</code></a></li>
<li><a href="https://github.com/defuse/php-encryption/blob/master/docs/classes/Key.md#keyloadfromasciisafestringsaved_key_string-do_not_trim--false" rel="noreferrer"><code>$loaded = Key::loadFromAsciiSafeString($string);</code></a></li>
</ul>
<h3>&quot;But I really want to use a password.&quot;</h3>
That's a bad idea, but okay, here's how to do it safely.
First, generate a random key and store it in a constant.
<pre><code>/**
 * Replace this with your own salt! 
 * Use bin2hex() then add \x before every 2 hex characters, like so:
 */
define('MY_PBKDF2_SALT', &quot;\x2d\xb7\x68\x1a\x28\x15\xbe\x06\x33\xa0\x7e\x0e\x8f\x79\xd5\xdf&quot;);
</code></pre>
Note that you're adding extra work and could just use this constant as the key and save yourself a lot of heartache!
Then use PBKDF2 (like so) to derive a suitable encryption key from your password rather than encrypting with your password directly.
<pre><code>/**
 * Get an AES key from a static password and a secret salt
 * 
 * @param string $password Your weak password here
 * @param int $keysize Number of bytes in encryption key
 */
function getKeyFromPassword($password, $keysize = 16)
{
 return hash_pbkdf2(
 'sha256',
 $password,
 MY_PBKDF2_SALT,
 100000, // Number of iterations
 $keysize,
 true
 );
}
</code></pre>
Don't just use a 16-character password. Your encryption key will be comically broken.

blocks|key|2808229|text|对于Laravel框架|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2808230|如果您使用的是Laravel框架，那么使用内部函数进行加密和解密会更容易。|2808231|$string+=+'Some+text+to+be+encrypted';
$encrypted+=+\Illuminate\Support\Facades\Crypt::encrypt($string);
$decrypted_string+=+\Illuminate\Support\Facades\Crypt::decrypt($encrypted);

var_dump($string);
var_dump($encrypted);
var_dump($decrypted_string);|code-block|syntax|javascript|2808232|2808233|注意:一定要在config/app.php文件的key选项中设置16、24或32个字符的随机字符串。否则，加密值将不安全。|blockquote|2808234|2808235|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|R|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|S|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|T|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|U|8|@]|9|@]|A|$]]|$1|N|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|O|$]]

<h1>For Laravel framework</h1>
If you are using Laravel framework then it's more easy to encrypt and decrypt with internal functions.
<pre><code>$string = 'Some text to be encrypted';
$encrypted = \Illuminate\Support\Facades\Crypt::encrypt($string);
$decrypted_string = \Illuminate\Support\Facades\Crypt::decrypt($encrypted);

var_dump($string);
var_dump($encrypted);
var_dump($decrypted_string);
</code></pre>
<blockquote>
Note: Be sure to set a 16, 24, or 32 character random string in the
key option of the config/app.php file. Otherwise, encrypted values
will not be secure.
</blockquote>

blocks|key|2808263|text|我来晚了，但为了寻找正确的方法，我偶然发现了这个页面，它是谷歌搜索返回的顶级页面之一，所以我想分享我对这个问题的看法，我认为它在撰写这篇文章时(2017年初)是最新的。从PHP7.1.0开始，mcrypt_decrypt和mcrypt_encrypt将被弃用，因此构建未来的验证代码应该使用openssl_encrypt和openssl_decrypt|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2808264|你可以这样做：|2808265|$string_to_encrypt="Test";
$password="password";
$encrypted_string=openssl_encrypt($string_to_encrypt,"AES-128-ECB",$password);
$decrypted_string=openssl_decrypt($encrypted_string,"AES-128-ECB",$password);|code-block|syntax|javascript|2808266|2808267|+重要：它使用ECB+mode，这是不安全的。如果您想要一个简单的解决方案，而不需要参加密码工程的速成课程，那么不要自己编写，只需使用库即可。|blockquote|BOLD|2808268|2808269|2808270|根据您的安全需求，您还可以使用任何其他切片器方法。要找出可用的切片器方法，请参阅openssl_get_cipher_methods函数。|2808271|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/manual/en/function.openssl-encrypt.php|1|http://php.net/manual/en/function.openssl-decrypt.php|2|https://blog.filippo.io/the-ecb-penguin/|3|http://php.net/manual/en/function.openssl-get-cipher-methods.php^0|2O|E|33|E|41|F|0|4H|F|1|0|0|0|0|1|2|7|8|2|0|0|0|14|Q|3|0^^$0|@$1|2|3|4|5|6|7|19|8|@$9|1A|A|1B|B|C]|$9|1C|A|1D|B|C]]|D|@$9|1E|A|1F|1|1G]|$9|1H|A|1I|1|1J]]|E|$]]|$1|F|3|G|5|6|7|1K|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|1L|8|@]|D|@]|E|$K|L]]|$1|M|3|-4|5|6|7|1M|8|@]|D|@]|E|$]]|$1|N|3|O|5|P|7|1N|8|@$9|1O|A|1P|B|Q]]|D|@$9|1Q|A|1R|1|1S]]|E|$]]|$1|R|3|-4|5|6|7|1T|8|@]|D|@]|E|$]]|$1|S|3|-4|5|6|7|1U|8|@]|D|@]|E|$]]|$1|T|3|U|5|6|7|1V|8|@]|D|@$9|1W|A|1X|1|1Y]]|E|$]]|$1|V|3|-4|5|6|7|1Z|8|@]|D|@]|E|$]]]|W|$X|$5|Y|Z|10|E|$11|12]]|13|$5|Y|Z|10|E|$11|14]]|15|$5|Y|Z|10|E|$11|16]]|17|$5|Y|Z|10|E|$11|18]]]]

I'm late to the party, but searching for the correct way to do it I came across this page it was one of the top Google search returns, so I will like to share my view on the problem, which I consider it to be up to date at the time of writing this post (beginning of 2017). From PHP 7.1.0 the <code>mcrypt_decrypt</code> and <code>mcrypt_encrypt</code> is going to be deprecated, so building future proof code should use <a href="http://php.net/manual/en/function.openssl-encrypt.php" rel="noreferrer">openssl_encrypt</a> and <a href="http://php.net/manual/en/function.openssl-decrypt.php" rel="noreferrer">openssl_decrypt</a>

You can do something like:

<pre><code>$string_to_encrypt="Test";
$password="password";
$encrypted_string=openssl_encrypt($string_to_encrypt,"AES-128-ECB",$password);
$decrypted_string=openssl_decrypt($encrypted_string,"AES-128-ECB",$password);
</code></pre>

<blockquote>
 Important: This uses <a href="https://blog.filippo.io/the-ecb-penguin/" rel="noreferrer">ECB mode</a>, which isn't secure. If you want a simple solution without taking a crash course in cryptography engineering, don't write it yourself, just use a library.
</blockquote>

You can use any other chipper methods as well, depending on your security need. To find out the available chipper methods please see the <a href="http://php.net/manual/en/function.openssl-get-cipher-methods.php" rel="noreferrer">openssl_get_cipher_methods</a> function.

blocks|key|2808280|text|如果你不想使用库(你应该)，那么使用下面这样的东西(PHP+7)：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2808281|function+sign($message,+$key)+{
++++return+hash_hmac('sha256',+$message,+$key)+.+$message;
}

function+verify($bundle,+$key)+{
++++return+hash_equals(
++++++hash_hmac('sha256',+mb_substr($bundle,+64,+null,+'8bit'),+$key),
++++++mb_substr($bundle,+0,+64,+'8bit')
++++);
}

function+getKey($password,+$keysize+=+16)+{
++++return+hash_pbkdf2('sha256',$password,'some_token',100000,$keysize,true);
}

function+encrypt($message,+$password)+{
++++$iv+=+random_bytes(16);
++++$key+=+getKey($password);
++++$result+=+sign(openssl_encrypt($message,'aes-256-ctr',$key,OPENSSL_RAW_DATA,$iv),+$key);
++++return+bin2hex($iv).bin2hex($result);
}

function+decrypt($hash,+$password)+{
++++$iv+=+hex2bin(substr($hash,+0,+32));
++++$data+=+hex2bin(substr($hash,+32));
++++$key+=+getKey($password);
++++if+(!verify($data,+$key))+{
++++++return+null;
++++}
++++return+openssl_decrypt(mb_substr($data,+64,+null,+'8bit'),'aes-256-ctr',$key,OPENSSL_RAW_DATA,$iv);
}

$string_to_encrypt='John+Smith';
$password='password';
$encrypted_string=encrypt($string_to_encrypt,+$password);
$decrypted_string=decrypt($encrypted_string,+$password);|code-block|syntax|javascript|2808282|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If you don't want to use library (which you should) then use something like this (PHP 7):

<pre><code>function sign($message, $key) {
 return hash_hmac('sha256', $message, $key) . $message;
}

function verify($bundle, $key) {
 return hash_equals(
 hash_hmac('sha256', mb_substr($bundle, 64, null, '8bit'), $key),
 mb_substr($bundle, 0, 64, '8bit')
 );
}

function getKey($password, $keysize = 16) {
 return hash_pbkdf2('sha256',$password,'some_token',100000,$keysize,true);
}

function encrypt($message, $password) {
 $iv = random_bytes(16);
 $key = getKey($password);
 $result = sign(openssl_encrypt($message,'aes-256-ctr',$key,OPENSSL_RAW_DATA,$iv), $key);
 return bin2hex($iv).bin2hex($result);
}

function decrypt($hash, $password) {
 $iv = hex2bin(substr($hash, 0, 32));
 $data = hex2bin(substr($hash, 32));
 $key = getKey($password);
 if (!verify($data, $key)) {
 return null;
 }
 return openssl_decrypt(mb_substr($data, 64, null, '8bit'),'aes-256-ctr',$key,OPENSSL_RAW_DATA,$iv);
}

$string_to_encrypt='John Smith';
$password='password';
$encrypted_string=encrypt($string_to_encrypt, $password);
$decrypted_string=decrypt($encrypted_string, $password);
</code></pre>

blocks|key|3020847|text|以下代码在php中适用于所有包含特殊字符的字符串|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3020848|+++//+Encrypt+text+--

++++$token+=+"9611222007552";

++++++$cipher_method+=+'aes-128-ctr';
++++++$enc_key+=+openssl_digest(php_uname(),+'SHA256',+TRUE);++
++++++$enc_iv+=+openssl_random_pseudo_bytes(openssl_cipher_iv_length($cipher_method));++
++++++$crypted_token+=+openssl_encrypt($token,+$cipher_method,+$enc_key,+0,+$enc_iv)+.+"::"+.+bin2hex($enc_iv);
++++echo++++$crypted_token;
++++//unset($token,+$cipher_method,+$enc_key,+$enc_iv);

++++//+Decrypt+text++--+

++++list($crypted_token,+$enc_iv)+=+explode("::",+$crypted_token);++
++++++$cipher_method+=+'aes-128-ctr';
++++++$enc_key+=+openssl_digest(php_uname(),+'SHA256',+TRUE);
++++++$token+=+openssl_decrypt($crypted_token,+$cipher_method,+$enc_key,+0,+hex2bin($enc_iv));
++++echo+++$token;
++++//unset($crypted_token,+$cipher_method,+$enc_key,+$enc_iv);|code-block|syntax|javascript|3020849|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Below code work in php for all string with special character 

<pre><code> // Encrypt text --

 $token = "9611222007552";

 $cipher_method = 'aes-128-ctr';
 $enc_key = openssl_digest(php_uname(), 'SHA256', TRUE); 
 $enc_iv = openssl_random_pseudo_bytes(openssl_cipher_iv_length($cipher_method)); 
 $crypted_token = openssl_encrypt($token, $cipher_method, $enc_key, 0, $enc_iv) . "::" . bin2hex($enc_iv);
 echo $crypted_token;
 //unset($token, $cipher_method, $enc_key, $enc_iv);

 // Decrypt text -- 

 list($crypted_token, $enc_iv) = explode("::", $crypted_token); 
 $cipher_method = 'aes-128-ctr';
 $enc_key = openssl_digest(php_uname(), 'SHA256', TRUE);
 $token = openssl_decrypt($crypted_token, $cipher_method, $enc_key, 0, hex2bin($enc_iv));
 echo $token;
 //unset($crypted_token, $cipher_method, $enc_key, $enc_iv);
</code></pre>

blocks|key|186862|text|已更新|type|unstyled|depth|inlineStyleRanges|entityRanges|data|186863|PHP+7就绪版本。它使用PHP+OpenSSL+Library中的openssl_encrypt函数。|offset|length|186864|class+Openssl_EncryptDecrypt+{
++++function+encrypt+($pure_string,+$encryption_key)+{
++++++++$cipher+++++=+'AES-256-CBC';
++++++++$options++++=+OPENSSL_RAW_DATA;
++++++++$hash_algo++=+'sha256';
++++++++$sha2len++++=+32;
++++++++$ivlen+=+openssl_cipher_iv_length($cipher);
++++++++$iv+=+openssl_random_pseudo_bytes($ivlen);
++++++++$ciphertext_raw+=+openssl_encrypt($pure_string,+$cipher,+$encryption_key,+$options,+$iv);
++++++++$hmac+=+hash_hmac($hash_algo,+$ciphertext_raw,+$encryption_key,+true);
++++++++return+$iv.$hmac.$ciphertext_raw;
++++}
++++function+decrypt+($encrypted_string,+$encryption_key)+{
++++++++$cipher+++++=+'AES-256-CBC';
++++++++$options++++=+OPENSSL_RAW_DATA;
++++++++$hash_algo++=+'sha256';
++++++++$sha2len++++=+32;
++++++++$ivlen+=+openssl_cipher_iv_length($cipher);
++++++++$iv+=+substr($encrypted_string,+0,+$ivlen);
++++++++$hmac+=+substr($encrypted_string,+$ivlen,+$sha2len);
++++++++$ciphertext_raw+=+substr($encrypted_string,+$ivlen%2B$sha2len);
++++++++$original_plaintext+=+openssl_decrypt($ciphertext_raw,+$cipher,+$encryption_key,+$options,+$iv);
++++++++$calcmac+=+hash_hmac($hash_algo,+$ciphertext_raw,+$encryption_key,+true);
++++++++if(function_exists('hash_equals'))+{
++++++++++++if+(hash_equals($hmac,+$calcmac))+return+$original_plaintext;
++++++++}+else+{
++++++++++++if+($this->hash_equals_custom($hmac,+$calcmac))+return+$original_plaintext;
++++++++}
++++}
++++/**
+++++*+(Optional)
+++++*+hash_equals()+function+polyfilling.
+++++*+PHP+5.6%2B+timing+attack+safe+comparison
+++++*/
++++function+hash_equals_custom($knownString,+$userString)+{
++++++++if+(function_exists('mb_strlen'))+{
++++++++++++$kLen+=+mb_strlen($knownString,+'8bit');
++++++++++++$uLen+=+mb_strlen($userString,+'8bit');
++++++++}+else+{
++++++++++++$kLen+=+strlen($knownString);
++++++++++++$uLen+=+strlen($userString);
++++++++}
++++++++if+($kLen+!==+$uLen)+{
++++++++++++return+false;
++++++++}
++++++++$result+=+0;
++++++++for+($i+=+0;+$i+<+$kLen;+$i%2B%2B)+{
++++++++++++$result+%7C=+(ord($knownString[$i])+%5E+ord($userString[$i]));
++++++++}
++++++++return+0+===+$result;
++++}
}

define('ENCRYPTION_KEY',+'__%5E%25&Q@$&*!@#$%25%5E&*%5E__');
$string+=+"This+is+the+original+string!";

$OpensslEncryption+=+new+Openssl_EncryptDecrypt;
$encrypted+=+$OpensslEncryption->encrypt($string,+ENCRYPTION_KEY);
$decrypted+=+$OpensslEncryption->decrypt($encrypted,+ENCRYPTION_KEY);|code-block|syntax|javascript|186865|entityMap|0|LINK|mutability|MUTABLE|url|https://www.php.net/manual/en/book.openssl.php|1|https://www.php.net/manual/en/function.openssl-encrypt.php^0|0|H|F|0|Y|F|1|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@$D|W|E|X|1|Y]|$D|Z|E|10|1|11]]|A|$]]|$1|F|3|G|5|H|7|12|8|@]|9|@]|A|$I|J]]|$1|K|3|-4|5|6|7|13|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]|S|$5|N|O|P|A|$Q|T]]]]

<h2>Updated</h2>

PHP 7 ready version. It uses <a href="https://www.php.net/manual/en/function.openssl-encrypt.php" rel="noreferrer">openssl_encrypt</a> function from PHP <a href="https://www.php.net/manual/en/book.openssl.php" rel="noreferrer">OpenSSL Library</a>.

<pre><code>class Openssl_EncryptDecrypt {
 function encrypt ($pure_string, $encryption_key) {
 $cipher = 'AES-256-CBC';
 $options = OPENSSL_RAW_DATA;
 $hash_algo = 'sha256';
 $sha2len = 32;
 $ivlen = openssl_cipher_iv_length($cipher);
 $iv = openssl_random_pseudo_bytes($ivlen);
 $ciphertext_raw = openssl_encrypt($pure_string, $cipher, $encryption_key, $options, $iv);
 $hmac = hash_hmac($hash_algo, $ciphertext_raw, $encryption_key, true);
 return $iv.$hmac.$ciphertext_raw;
 }
 function decrypt ($encrypted_string, $encryption_key) {
 $cipher = 'AES-256-CBC';
 $options = OPENSSL_RAW_DATA;
 $hash_algo = 'sha256';
 $sha2len = 32;
 $ivlen = openssl_cipher_iv_length($cipher);
 $iv = substr($encrypted_string, 0, $ivlen);
 $hmac = substr($encrypted_string, $ivlen, $sha2len);
 $ciphertext_raw = substr($encrypted_string, $ivlen+$sha2len);
 $original_plaintext = openssl_decrypt($ciphertext_raw, $cipher, $encryption_key, $options, $iv);
 $calcmac = hash_hmac($hash_algo, $ciphertext_raw, $encryption_key, true);
 if(function_exists('hash_equals')) {
 if (hash_equals($hmac, $calcmac)) return $original_plaintext;
 } else {
 if ($this-&gt;hash_equals_custom($hmac, $calcmac)) return $original_plaintext;
 }
 }
 /**
 * (Optional)
 * hash_equals() function polyfilling.
 * PHP 5.6+ timing attack safe comparison
 */
 function hash_equals_custom($knownString, $userString) {
 if (function_exists('mb_strlen')) {
 $kLen = mb_strlen($knownString, '8bit');
 $uLen = mb_strlen($userString, '8bit');
 } else {
 $kLen = strlen($knownString);
 $uLen = strlen($userString);
 }
 if ($kLen !== $uLen) {
 return false;
 }
 $result = 0;
 for ($i = 0; $i &lt; $kLen; $i++) {
 $result |= (ord($knownString[$i]) ^ ord($userString[$i]));
 }
 return 0 === $result;
 }
}

define('ENCRYPTION_KEY', '__^%&amp;Q@$&amp;*!@#$%^&amp;*^__');
$string = "This is the original string!";

$OpensslEncryption = new Openssl_EncryptDecrypt;
$encrypted = $OpensslEncryption-&gt;encrypt($string, ENCRYPTION_KEY);
$decrypted = $OpensslEncryption-&gt;decrypt($encrypted, ENCRYPTION_KEY);
</code></pre>

blocks|key|188959|text|这些是使用AES256+CBC用PHP加密/解密字符串的简单方法。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|188960|function+encryptString($plaintext,+$password,+$encoding+=+null)+{
++++$iv+=+openssl_random_pseudo_bytes(16);
++++$ciphertext+=+openssl_encrypt($plaintext,+"AES-256-CBC",+hash('sha256',+$password,+true),+OPENSSL_RAW_DATA,+$iv);
++++$hmac+=+hash_hmac('sha256',+$ciphertext.$iv,+hash('sha256',+$password,+true),+true);
++++return+$encoding+==+"hex"+?+bin2hex($iv.$hmac.$ciphertext)+:+($encoding+==+"base64"+?+base64_encode($iv.$hmac.$ciphertext)+:+$iv.$hmac.$ciphertext);
}

function+decryptString($ciphertext,+$password,+$encoding+=+null)+{
++++$ciphertext+=+$encoding+==+"hex"+?+hex2bin($ciphertext)+:+($encoding+==+"base64"+?+base64_decode($ciphertext)+:+$ciphertext);
++++if+(!hash_equals(hash_hmac('sha256',+substr($ciphertext,+48).substr($ciphertext,+0,+16),+hash('sha256',+$password,+true),+true),+substr($ciphertext,+16,+32)))+return+null;
++++return+openssl_decrypt(substr($ciphertext,+48),+"AES-256-CBC",+hash('sha256',+$password,+true),+OPENSSL_RAW_DATA,+substr($ciphertext,+0,+16));
}|code-block|syntax|javascript|188961|用法：|188962|$enc+=+encryptString("mysecretText",+"myPassword");
$dec+=+decryptString($enc,+"myPassword");|188963|entityMap^0|5|A|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|T|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|U|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|P|$]]

These are compact methods to encrypt / decrypt strings with PHP using AES256 CBC:

<pre><code>function encryptString($plaintext, $password, $encoding = null) {
 $iv = openssl_random_pseudo_bytes(16);
 $ciphertext = openssl_encrypt($plaintext, "AES-256-CBC", hash('sha256', $password, true), OPENSSL_RAW_DATA, $iv);
 $hmac = hash_hmac('sha256', $ciphertext.$iv, hash('sha256', $password, true), true);
 return $encoding == "hex" ? bin2hex($iv.$hmac.$ciphertext) : ($encoding == "base64" ? base64_encode($iv.$hmac.$ciphertext) : $iv.$hmac.$ciphertext);
}

function decryptString($ciphertext, $password, $encoding = null) {
 $ciphertext = $encoding == "hex" ? hex2bin($ciphertext) : ($encoding == "base64" ? base64_decode($ciphertext) : $ciphertext);
 if (!hash_equals(hash_hmac('sha256', substr($ciphertext, 48).substr($ciphertext, 0, 16), hash('sha256', $password, true), true), substr($ciphertext, 16, 32))) return null;
 return openssl_decrypt(substr($ciphertext, 48), "AES-256-CBC", hash('sha256', $password, true), OPENSSL_RAW_DATA, substr($ciphertext, 0, 16));
}
</code></pre>

Usage:

<pre><code>$enc = encryptString("mysecretText", "myPassword");
$dec = decryptString($enc, "myPassword");
</code></pre>

blocks|key|186872|text|在PHP中，可以使用称为OpenSSL函数的加密和解密加密扩展之一对字符串进行加密和解密。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|186873|openssl_encrypt()函数:+openssl_encrypt()函数用于加密数据。|offset|length|style|BOLD|186874|语法如下:|186875|string+openssl_encrypt(+string+$data，string+$method，string+$key，$options+=+0，string+$iv，string+$tag=+NULL，string+$aad，int+$tag_length+=+16+)|186876|参数如下:|186877|$data:保存需要加密的字符串或数据。|186878|$method:加密方法采用openssl_get_cipher_methods()函数。|186879|$key:它保存加密密钥。|186880|$options:它保存OPENSSL_RAW_DATA和OPENSSL_ZERO_PADDING标志的逐位析取。|186881|$iv:它保存非空的初始化向量。|186882|$tag:当使用AEAD密码模式(GCM或CCM)时，它保存通过引用传递的身份验证标签。|186883|$aad:它保存额外的身份验证数据。|186884|$tag_length:它保存身份验证标记的长度。GCM模式下鉴权标签长度在4到16之间。|186885|返回值：成功返回加密串，失败返回FALSE。|186886|openssl_decrypt()函数openssl_decrypt()函数用于解密数据。|186887|186888|string+openssl_decrypt(+string+$data，string+$method，string+$key，int+$options+=+0，string+$iv，string+$tag，string+$aad)|186889|186890|186891|186892|186893|186894|186895|$tag:它使用AEAD密码模式(GCM或CCM)保存身份验证标签。当身份验证失败时，openssl_decrypt()返回FALSE。|186896|186897|返回值：成功返回解密后的字符串，失败返回FALSE。|186898|方法:首先声明一个字符串并将其存储到变量中，然后使用openssl_encrypt()函数对给定的字符串进行加密，并使用openssl_decrypt()函数对给定的字符串进行解密。|186899|您可以在以下位置找到示例:+https://www.geeksforgeeks.org/how-to-encrypt-and-decrypt-a-php-string/|186900|entityMap|0|LINK|mutability|MUTABLE|url|https://www.geeksforgeeks.org/how-to-encrypt-and-decrypt-a-php-string/^0|0|0|1B|0|0|5|0|0|0|5|0|0|6|0|0|8|0|0|5|0|0|9|0|0|4|0|0|5|0|0|5|0|0|C|0|0|4|0|0|19|0|0|5|0|0|0|5|0|0|6|0|0|8|0|0|5|0|0|9|0|0|4|0|0|5|0|0|5|0|0|4|0|0|E|1Y|0|0^^$0|@$1|2|3|4|5|6|7|1X|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1Y|8|@$D|1Z|E|20|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|21|8|@$D|22|E|23|F|G]]|9|@]|A|$]]|$1|J|3|K|5|6|7|24|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|25|8|@$D|26|E|27|F|G]]|9|@]|A|$]]|$1|N|3|O|5|6|7|28|8|@$D|29|E|2A|F|G]]|9|@]|A|$]]|$1|P|3|Q|5|6|7|2B|8|@$D|2C|E|2D|F|G]]|9|@]|A|$]]|$1|R|3|S|5|6|7|2E|8|@$D|2F|E|2G|F|G]]|9|@]|A|$]]|$1|T|3|U|5|6|7|2H|8|@$D|2I|E|2J|F|G]]|9|@]|A|$]]|$1|V|3|W|5|6|7|2K|8|@$D|2L|E|2M|F|G]]|9|@]|A|$]]|$1|X|3|Y|5|6|7|2N|8|@$D|2O|E|2P|F|G]]|9|@]|A|$]]|$1|Z|3|10|5|6|7|2Q|8|@$D|2R|E|2S|F|G]]|9|@]|A|$]]|$1|11|3|12|5|6|7|2T|8|@$D|2U|E|2V|F|G]]|9|@]|A|$]]|$1|13|3|14|5|6|7|2W|8|@$D|2X|E|2Y|F|G]]|9|@]|A|$]]|$1|15|3|16|5|6|7|2Z|8|@$D|30|E|31|F|G]]|9|@]|A|$]]|$1|17|3|I|5|6|7|32|8|@$D|33|E|34|F|G]]|9|@]|A|$]]|$1|18|3|19|5|6|7|35|8|@]|9|@]|A|$]]|$1|1A|3|M|5|6|7|36|8|@$D|37|E|38|F|G]]|9|@]|A|$]]|$1|1B|3|O|5|6|7|39|8|@$D|3A|E|3B|F|G]]|9|@]|A|$]]|$1|1C|3|Q|5|6|7|3C|8|@$D|3D|E|3E|F|G]]|9|@]|A|$]]|$1|1D|3|S|5|6|7|3F|8|@$D|3G|E|3H|F|G]]|9|@]|A|$]]|$1|1E|3|U|5|6|7|3I|8|@$D|3J|E|3K|F|G]]|9|@]|A|$]]|$1|1F|3|W|5|6|7|3L|8|@$D|3M|E|3N|F|G]]|9|@]|A|$]]|$1|1G|3|1H|5|6|7|3O|8|@$D|3P|E|3Q|F|G]]|9|@]|A|$]]|$1|1I|3|10|5|6|7|3R|8|@$D|3S|E|3T|F|G]]|9|@]|A|$]]|$1|1J|3|1K|5|6|7|3U|8|@$D|3V|E|3W|F|G]]|9|@]|A|$]]|$1|1L|3|1M|5|6|7|3X|8|@]|9|@]|A|$]]|$1|1N|3|1O|5|6|7|3Y|8|@]|9|@$D|3Z|E|40|1|41]]|A|$]]|$1|1P|3|-4|5|6|7|42|8|@]|9|@]|A|$]]]|1Q|$1R|$5|1S|1T|1U|A|$1V|1W]]]]

In PHP, Encryption and Decryption of a string is possible using one of the Cryptography Extensions called OpenSSL function for encrypt and decrypt.
openssl_encrypt() Function: The openssl_encrypt() function is used to encrypt the data.
Syntax is as follows :
string openssl_encrypt( string $data, string $method, string $key, $options = 0, string $iv, string $tag= NULL, string $aad, int $tag_length = 16 )
Parameters are as follows :
$data: It holds the string or data which need to be encrypted.
$method: The cipher method is adopted using openssl_get_cipher_methods() function.
$key: It holds the encryption key.
$options: It holds the bitwise disjunction of the flags OPENSSL_RAW_DATA and OPENSSL_ZERO_PADDING.
$iv: It holds the initialization vector which is not NULL.
$tag: It holds the authentication tag which is passed by reference when using AEAD cipher mode (GCM or CCM).
$aad: It holds the additional authentication data.
$tag_length: It holds the length of the authentication tag. The length of authentication tag lies between 4 to 16 for GCM mode.
Return Value: It returns the encrypted string on success or FALSE on failure.
openssl_decrypt() Function The openssl_decrypt() function is used to decrypt the data.
Syntax is as follows :
string openssl_decrypt( string $data, string $method, string $key, int $options = 0, string $iv, string $tag, string $aad)
Parameters are as follows :
$data: It holds the string or data which need to be encrypted.
$method: The cipher method is adopted using openssl_get_cipher_methods() function.
$key: It holds the encryption key.
$options: It holds the bitwise disjunction of the flags OPENSSL_RAW_DATA and OPENSSL_ZERO_PADDING.
$iv: It holds the initialization vector which is not NULL.
$tag: It holds the authentication tag using AEAD cipher mode (GCM or CCM). When authentication fails openssl_decrypt() returns FALSE.
$aad: It holds the additional authentication data.
Return Value: It returns the decrypted string on success or FALSE on failure.
Approach: First declare a string and store it into variable and use openssl_encrypt() function to encrypt the given string and use openssl_decrypt() function to descrypt the given string.
You can find the examples at : <a href="https://www.geeksforgeeks.org/how-to-encrypt-and-decrypt-a-php-string/" rel="nofollow noreferrer">https://www.geeksforgeeks.org/how-to-encrypt-and-decrypt-a-php-string/</a>

What I mean is:

<pre><code>Original String + Salt or Key --&gt; Encrypted String
Encrypted String + Salt or Key --&gt; Decrypted (Original String)
</code></pre>

Maybe something like:

<pre><code>"hello world!" + "ABCD1234" --&gt; Encrypt --&gt; "2a2ffa8f13220befbe30819047e23b2c" (may be, for e.g)
"2a2ffa8f13220befbe30819047e23b2c" --&gt; Decrypt with "ABCD1234" --&gt; "hello world!"
</code></pre>

<ul>
<li>In PHP, how can you do this?</li>
</ul>

Attempted to use <code>Crypt_Blowfish</code>, but it didn't work for me.

How do you Encrypt and Decrypt a PHP String?

数据安全

身份验证

服务器

PHP语言

我的意思是：Original String + Salt or Key --> Encrypted StringEncrypted String + Salt or Key --> Decrypted (Original String)可能是这样的："hello world!" + "ABCD1234" --> Enc...

问如何加密和解密PHP字符串？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何加密和解密PHP字符串？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何加密和解密PHP字符串？
EN