Download the PHP package nzo/url-encryptor-bundle without Composer
On this page you can find all versions of the php package nzo/url-encryptor-bundle. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Informations about the package url-encryptor-bundle
NzoUrlEncryptorBundle
The NzoUrlEncryptorBundle is a Symfony Bundle used to Encrypt and Decrypt data and variables in the Web application or passed through the URL
to provide more security to the project.
Also it prevent users from reading and modifying sensitive data sent through the URL
.
The Version (^6.0) is compatible with Symfony >= 4.4
Features include:
- Url Data & parameters Encryption
- Url Data & parameters Decryption
- Data Encryption & Decryption
- Access from Twig by ease
- Flexible configuration
- Uses OpenSSL extension
By default, this bundle use the aes-256-ctr algorithm.
CTR mode (without any additional authentication step) is malleable, which means that it is possible to change the meaning of the ciphertext and if the plaintext is guessable then it could lead to IDOR.
For more secure output, you must configure the bundle to use a unique and random IV (random_pseudo_bytes: TRUE
)
Installation
Through Composer:
Install the bundle:
Register the bundle in config/bundles.php (without Flex):
Configure the bundle:
* To generate the same cypher text each time: random_pseudo_bytes: FALSE
(Not Secure)
* To generate a different cypher text each time: random_pseudo_bytes: TRUE
(Secure)
Usage
In the twig template:
Use the twig extensions filters or functions to encrypt
or decrypt
your data:
In the controller with annotation service:
Use the annotation service to decrypt
/ encrypt
automatically any parameter you want, by using the ParamDecryptor
/ ParamEncryptor
annotation service and specifying in it all the parameters to be decrypted/encrypted.
With autowiring:
Without autowiring:
License
This bundle is under the MIT license. See the complete license in the bundle:
See LICENSE
All versions of url-encryptor-bundle with dependencies
ext-openssl Version *
doctrine/annotations Version ^1.7|^2.0
symfony/framework-bundle Version ^4.4|^5.0|^6.0|^7.0