Download the PHP package bespredel/encryption-form without Composer

EncryptionForm - Secure Client-Side Form Encryption

🔐 Protect sensitive form data before it leaves the browser

EncryptionForm is a lightweight solution for encrypting form data on the client side before sending it to the server.

It helps protect sensitive information such as passwords, personal data, and confidential inputs from interception.

✨ Features

• RSA Encryption: Uses JSEncrypt for secure RSA encryption.
• HTML Attribute Control: Specify which fields to encrypt using data-encrypt="true".
• Flexible Form Encryption: Target specific forms using data-encrypt-form attribute.
• Blade Directive: Automatically inject encryption scripts with @encryptFormScripts.
• Simple Key Management: Easily configure keys via .env or generate new keys via artisan commands.
• Zero Dependencies: No NPM required; all scripts are included in the package.

🚀 Use Cases

• Login & authentication forms
• Payment / sensitive input fields
• Personal data collection forms
• Secure admin panels
• API request protection

🧠 How It Works

1. User fills the form
2. Data is encrypted in the browser
3. Encrypted payload is sent to server
4. Server decrypts the data
5. Application processes secure input

📦 Installation

1. Install the Package:

2. Publish Config and Scripts:

3. Add RSA Keys to :

   If you don't have keys, you can generate them using the following commands:

4. Include the Blade Directive in Your Template: Add @encryptFormScripts to your layout file or specific views where forms are encrypted.

🚀 Usage

Middleware

For auto decryption of form data, add the DecryptRequestFields middleware to your Kernel:

or use it in a route:

HTML Form Example

In your Blade template:

• Add data-encrypt-form to the <form> tag to enable encryption for this form. All supported form fields will be encrypted.
  • Use data-encrypt="true" for fields that require encryption. All other fields will not be encrypted.
  • Use data-encrypt="false" for fields that do not require encryption. All other fields will be encrypted.

Types of Fields Available for Encryption:

• Input Fields:

  • Supported types: text, email, password, number, date, and similar.
  • Exceptions: file, checkbox, radio, select.
• Textarea:
  • Fully supported.

!!! It is important to note that the encrypted value will be longer than the original value, which may affect data length constraints.

Manual decrypting data on the server

Use the Decryptor class to decrypt data on the server:

Or use dependency injection:

Or use the openssl_private_decrypt function to decrypt data on the server:

⚡ Commands

Generate New RSA Keys

To generate a new pair of RSA keys:

This will update the keys in your .env file. Keys are saved as escaped multiline values to keep the .env file parse-safe.

⚙️ Configuration

Config File:

Quality checks

Key Rotation via Scheduler

You can schedule automatic key rotation via the key_rotation key in the config file.:

🤝 Contributing

1. Fork the repository.
2. Create your feature branch: git checkout -b feature/my-feature.
3. Commit your changes: git commit -m 'Add some feature'.
4. Push to the branch: git push origin feature/my-feature.
5. Open a pull request.

🛡 Security

PLEASE DON'T DISCLOSE SECURITY-RELATED ISSUES PUBLICLY.

If you discover any security related issues, please email [email protected] instead of using the issue tracker.

🙏 Acknowledgements

I would like to thank the authors and contributors of the JSEncrypt library for providing a secure RSA encryption solution for client-side data encryption.

📄 License

This package is open-source software licensed under the MIT license.

⭐ Support

If you find this project useful, give it a star ⭐