本指南解釋如何實(shí)現(xiàn)加密和解密 Laravel 模型中的敏感資料。透過(guò)執(zhí)行以下步驟，您可以 在將資料儲(chǔ)存到資料庫(kù)之前對(duì)其進(jìn)行保護(hù)，並在儲(chǔ)存時(shí)對(duì)其進(jìn)行解密 正在檢索它。

? ?先決條件

• Laravel：確保您使用的是 Laravel 專案。
• 加密金鑰：Laravel 在 .env 檔案中自動(dòng)產(chǎn)生 APP_KEY。此金鑰由 Laravel 的加密服務(wù)使用。

? ?第 1 步：在模型中設(shè)定加密

在模型中，我們將使用 Laravel 的 encrypt() 和 decrypt() 函數(shù)自動(dòng)處理指定欄位的加密和解密。

? ?Doctor模型

使用加密和解密方法建立或更新Doctor模型。我們將在將名字、姓氏、電子郵件和手機(jī)等欄位儲(chǔ)存到資料庫(kù)之前對(duì)其進(jìn)行加密。

<?phpnamespace  AppModels;use IlluminateDatabaseEloquentModel;use IlluminateSupportFacadesCrypt;class Doctor extends Model{
    protected $fillable = [
        &#39;first_name&#39;, &#39;last_name&#39;, &#39;email&#39;, &#39;mobile&#39;, &#39;hashed_email&#39;, &#39;password&#39;
    ];

    // Automatically encrypt attributes when setting them
    public function setFirstNameAttribute($value)
    {
        $this->attributes['first_name']?=?encrypt($value);
????}

????public?function?setLastNameAttribute($value)
????{
????????$this->attributes['last_name']?=?encrypt($value);
????}

????public?function?setEmailAttribute($value)
????{
????????$this->attributes['email']?=?encrypt($value);
????}

????public?function?setMobileAttribute($value)
????{
????????$this->attributes['mobile']?=?encrypt($value);
????}

????//?Automatically?decrypt?attributes?when?getting?them
????public?function?getFirstNameAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getLastNameAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getEmailAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getMobileAttribute($value)
????{
????????return?decrypt($value);
????}}

?????說(shuō)明

• Setter 方法：使用 set{AttributeName }Attribute() 在資料儲(chǔ)存到資料庫(kù)之前加密資料。
• Getter 方法：從資料庫(kù)擷取資料時(shí)，使用 get{AttributeName}Attribute() 解密。

第 2 步：資料儲(chǔ)存與擷取的控制器

在控制器中，您可以處理驗(yàn)證並呼叫模型的 直接加密屬性，無(wú)需額外加密/解密 步驟。

? ?????DoctorController

DoctorController 透過(guò)驗(yàn)證來(lái)處理註冊(cè) 輸入數(shù)據(jù)，透過(guò)模型對(duì)其進(jìn)行加密，並將其保存在資料庫(kù)中。 取得醫(yī)生資料時(shí)，會(huì)自動(dòng)解密 敏感字段。

<?phpnamespace  AppHttpControllers;use IlluminateHttpRequest;use AppModelsDoctor;use IlluminateSupportFacadesHash;class DoctorController extends Controller{
    public function register(Request $request)
    {
        // Validate the incoming request
        $validatedData = $request->validate([
????????????'first_name'?=>?'required|string|max:255',
????????????'last_name'?=>?'required|string|max:255',
????????????'email'?=>?'required|string|email|max:255|unique:doctors,email',
????????????'mobile'?=>?'required|string|size:10|unique:doctors,mobile',
????????????'password'?=>?'required|string|min:8|confirmed',
????????]);

????????//?Hash?the?email?to?ensure?uniqueness
????????$hashedEmail?=?hash('sha256',?$validatedData['email']);

????????//?Create?a?new?doctor?record?(model?will?handle?encryption)
????????$doctor?=?Doctor::create([
????????????'first_name'?=>?$validatedData['first_name'],
????????????'last_name'?=>?$validatedData['last_name'],
????????????'email'?=>?$validatedData['email'],
????????????'hashed_email'?=>?$hashedEmail,
????????????'mobile'?=>?$validatedData['mobile'],
????????????'password'?=>?Hash::make($validatedData['password']),
????????]);

????????return?response()->json([
????????????'message'?=>?'Doctor?registered?successfully',
????????????'doctor'?=>?$doctor
????????],?201);
????}

????public?function?show($id)
????{
????????//?Fetch?the?doctor?record?(model?will?decrypt?the?data?automatically)
????????$doctor?=?Doctor::findOrFail($id);

????????return?response()->json($doctor);
????}}

Schema::create('doctors',?function?(Blueprint?$table)?{
????$table->id();
????$table->text('first_name');
????$table->text('last_name');
????$table->text('email');
????$table->string('hashed_email')->unique();?//?SHA-256?hashed?email
????$table->text('mobile');
????$table->string('password');
????$table->timestamps();});

<?phpnamespace  AppModels;use IlluminateDatabaseEloquentModel;use IlluminateSupportFacadesCrypt;class Doctor extends Model{
    protected $fillable = [
        &#39;first_name&#39;, &#39;last_name&#39;, &#39;email&#39;, &#39;mobile&#39;, &#39;hashed_email&#39;, &#39;password&#39;
    ];

    // Automatically encrypt attributes when setting them
    public function setFirstNameAttribute($value)
    {
        $this->attributes['first_name']?=?encrypt($value);
????}

????public?function?setLastNameAttribute($value)
????{
????????$this->attributes['last_name']?=?encrypt($value);
????}

????public?function?setEmailAttribute($value)
????{
????????$this->attributes['email']?=?encrypt($value);
????}

????public?function?setMobileAttribute($value)
????{
????????$this->attributes['mobile']?=?encrypt($value);
????}

????//?Automatically?decrypt?attributes?when?getting?them
????public?function?getFirstNameAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getLastNameAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getEmailAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getMobileAttribute($value)
????{
????????return?decrypt($value);
????}}

以上是Laravel 中的資料加密與解密的詳細(xì)內(nèi)容。更多資訊請(qǐng)關(guān)注PHP中文網(wǎng)其他相關(guān)文章！