blocks|key|804189|text|我打赌最好的方法是使用SSL+(HTTPS)，我建议你阅读OWASP+Guide，尤其是How-To+section。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|804190|entityMap|0|LINK|mutability|MUTABLE|url|https://www.owasp.org/index.php/OWASP_Guide_Project|1|https://www.owasp.org/index.php/Category%253aHow_To^0|T|B|0|18|E|1|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]|$A|R|B|S|1|T]]|C|$]]|$1|D|3|-4|5|6|7|U|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]]]

I bet the best way is use SSL (HTTPS) and I recommend you to read the <a href="https://www.owasp.org/index.php/OWASP_Guide_Project" rel="noreferrer">OWASP Guide</a> and especially the <a href="https://www.owasp.org/index.php/Category%3aHow_To" rel="noreferrer">How-To section</a>.

blocks|key|1654352|text|我一直很喜欢MCRYPT|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1654353|//Key
$key+=+'SuperSecretKey';

//To+Encrypt:
$encrypted+=+mcrypt_encrypt(MCRYPT_RIJNDAEL_256,+$key,+'I+want+to+encrypt+this',+MCRYPT_MODE_ECB);

//To+Decrypt:
$decrypted+=+mcrypt_decrypt(MCRYPT_RIJNDAEL_256,+$key,+$encrypted,+MCRYPT_MODE_ECB);|code-block|syntax|javascript|1654354|如果这就是你要找的东西。它将把JSON当作一个字符串，然后在你解密它之后，你将不得不做你的json_decode()或者你正在做的任何事情。|offset|length|style|CODE|1654355|entityMap^0|0|0|19|D|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

I always liked MCRYPT

<pre><code>//Key
$key = 'SuperSecretKey';

//To Encrypt:
$encrypted = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $key, 'I want to encrypt this', MCRYPT_MODE_ECB);

//To Decrypt:
$decrypted = mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $key, $encrypted, MCRYPT_MODE_ECB);
</code></pre>

If that's something you're looking for. It'll treat the JSON as a string and then after you decrypt it you'll have to do your <code>json_decode()</code> or whatever it is you're doing.

blocks|key|804311|text|这真的取决于数据的敏感性。然而，根据我的经验，一个简单的php加密通常可以做到这一点。我通常会先加密json数据字段中的敏感字段，然后再将其编码为json字符串。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|804312|这是加密部分的代码。|804313|$key+=‘加密密码'；$string+=’要加密的字符串‘；//注意空格|804314|要加密的：|offset|length|style|BOLD|804315|$encrypted+=+base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_256,+md5($key),+$string,+MCRYPT_MODE_CBC,+md5(md5($key))));|code-block|syntax|javascript|804316|要解密的：|804317|$decrypted+=+rtrim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256,+md5($key),+base64_decode($encrypted),+MCRYPT_MODE_CBC,+md5(md5($key))),+"\0");|804318|然而，你应该总是散列(MD5，SHA1)密码，最好是一些盐。|804319|entityMap^0|0|0|0|4|1|0|0|4|1|0|0|0|U|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Z|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|11|8|@$H|12|I|13|J|K]]|9|@]|A|$]]|$1|L|3|M|5|N|7|14|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|15|8|@$H|16|I|17|J|K]]|9|@]|A|$]]|$1|S|3|T|5|N|7|18|8|@]|9|@]|A|$O|P]]|$1|U|3|V|5|6|7|19|8|@$H|1A|I|1B|J|K]]|9|@]|A|$]]|$1|W|3|-4|5|6|7|1C|8|@]|9|@]|A|$]]]|X|$]]

It really depending on how sensitive the data are. However from my experience a simple php encryption usually do the trick. I would usually encrypt the sensitive fields in the json data fields before encoding it to a json string.

Here's the code for the encryption part.

$key = 'password to (en/de)crypt';
$string = ' string to be encrypted '; // note the spaces

To Encrypt:

<pre><code>$encrypted = base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_256, md5($key), $string, MCRYPT_MODE_CBC, md5(md5($key))));
</code></pre>

To Decrypt:

<pre><code>$decrypted = rtrim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, md5($key), base64_decode($encrypted), MCRYPT_MODE_CBC, md5(md5($key))), "\0");
</code></pre>

However, you should always hash (MD5, SHA1) passwords, preferably with some salt.

blocks|key|4840891|text|在服务器上存储私钥并使用DES加密；这是一种双向算法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4840892|编辑：|4840893|根据评论，我似乎误解了这个问题。我的假设是，OP想要在互联网上发送加密的数据，比如在电子邮件或其他什么东西中，然后在稍后的时间取回数据并能够解密。在提交答案之前，我一定会在未来通过评论来澄清。|4840894|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Store a private key on the server and use DES encryption; it's a 2-way algorithm.

EDIT:

Per comments, it seems I've misinterpreted the question. My assumption was OP would like to send encrypted data out on the Internet like in an email or something then get the data back at a later time and be able to decrypt it. I'll be sure to clarify through comments in the future before submitting an answer.

blocks|key|804272|text|使用Open+SSL：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|804273|http://www.php.net/manual/en/book.openssl.php|offset|length|804274|如果公钥/私钥不可用，则无需https即可生成公钥/私钥对。|804275|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|19|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@$D|Q|E|R|1|S]]|A|$]]|$1|F|3|G|5|6|7|T|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|C]]]]

Use Open SSL:

<a href="http://www.php.net/manual/en/book.openssl.php" rel="nofollow">http://www.php.net/manual/en/book.openssl.php</a>

You can generate a public/private key pair without the need for https if it's unavailable.

blocks|key|1654412|text|当然，要在web上安全地传输数据，需要使用SSL+(HTTPS)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1654413|但话虽如此，在发送数据之前，仍然有理由对json数据进行加密。|1654414|我在加密json数据时遇到了问题。它是由json数据中的"\t“引起的。在加密之前，您需要删除它们。否则，当您想要将其解密回一个合适的json格式时，将会出现问题。|1654415|$plain_txt+=+str_replace("\r"，''，$plain_txt)；|1654416|$plain_txt+=+str_replace("\n"，''，$plain_txt)；|1654417|$plain_txt+=+str_replace("\t"，''，$plain_txt)；|1654418|请参阅工作示例：https://gist.github.com/petermuller71/33616d55174d9725fc00a663d30194ba|offset|length|1654419|entityMap|0|LINK|mutability|MUTABLE|url|https://gist.github.com/petermuller71/33616d55174d9725fc00a663d30194ba^0|0|0|0|0|0|0|8|1Y|0|0^^$0|@$1|2|3|4|5|6|7|X|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Y|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Z|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|10|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|11|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|12|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|13|8|@]|9|@$N|14|O|15|1|16]]|A|$]]|$1|P|3|-4|5|6|7|17|8|@]|9|@]|A|$]]]|Q|$R|$5|S|T|U|A|$V|W]]]]

Of course, SSL (HTTPS) is needed to safely transfer data across the web.

But that said, there are still reasons to encrypt json data, before you sent them.

I had a problem with encrypting json data. It was caused by "\t" in json data.
You need to remove them, before encryption. Otherwise there will be a problem when you want to decrypt it back to a propper json format.

$plain_txt = str_replace("\r",'', $plain_txt);

$plain_txt = str_replace("\n",'', $plain_txt);

$plain_txt = str_replace("\t",'', $plain_txt);

See a working example:
<a href="https://gist.github.com/petermuller71/33616d55174d9725fc00a663d30194ba" rel="nofollow noreferrer">https://gist.github.com/petermuller71/33616d55174d9725fc00a663d30194ba</a>

I have a webserver running mysql and php which sends data to a json string.

I have a second webserver which reads the data and then displays it.

Everything works fine at the moment.

I need to add some sensitive data into the string, so I was wondering what is the best way to encrypt/decrypt the json using php?

Can someone help!?

What is the best way to encrypt/decrypt a json string

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我有一个运行mysql和php的and服务器，它将数据发送到json字符串。我有第二个the服务器，它读取数据，然后显示它。目前一切运行正常。我需要在字符串中添加一些敏感数据，所以我想知道使用php加密/解密json的最好方法是什么？谁能帮帮忙！？

问加密/解密json字符串的最佳方法是什么？
EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问加密/解密json字符串的最佳方法是什么？EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问加密/解密json字符串的最佳方法是什么？
EN