doupin5408 2017-03-01 16:12
浏览 61

解密PHP AES加密URL参数

I'm using php AES openssl encrypt/decrypt methods answered here but sending encrypted data as URL param and decrypting it is not working.

  • secret is the same in both php files
  • crypto data is the same (AFAIK) in both files

Encryption/decryption example that works:

$crypted = cryptoJsAesEncrypt($secret, "test");
$decrypted = cryptoJsAesDecrypt($secret, $crypted);
var_dump($decrypted); // returns "test"

URL encoding functions used in example below

function base64_url_encode($input) {
    return strtr(base64_encode($input), '+/=', '-_,');
}

function base64_url_decode($input) {
    return base64_decode(strtr($input, '-_,', '+/='));
}

php_from.php (url params crypted here):

// params to encrypt
$params = array(
  'key' => 'value'
);

// encrypt data
$crypto = cryptoJsAesEncrypt($secret, json_encode($params));

// var_dump($crypto); -> {"ct":"vt5RZUmrZkCk2RCiC4euiM0onSHgXa6rwSJQ33ygeXdJmEN2X8bcUMn\/ldXR8y5K","iv":"eac142cb44f6a585e801a25ae353b45e","s":"176ac0f4a9519361"}

// base64 encode crypto data for sending as URL param
$crypto = base64_url_encode($crypto);

// here is the code for calling php_to.php (using curl) and sending crypto parameter

// url path
$url = "http://path_to_php_to.php";

// apend url with param
$url = $url . "?crypto=" . $crypto;

// open connection
$ch = curl_init();

// set the url, number of POST vars, POST data
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_POST, count($params));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

// execute post
$result = (curl_exec($ch));

// close connection
curl_close($ch);

php_to.php (URL params decrypted here):

// get crypted data param
$crypto = isset($_GET['crypto']) ? $_GET['crypto'] : NULL;

// base64 url decode crypto param
$crypto = base64_url_decode($crypto);

// var_dump($crypto); -> {"ct":"vt5RZUmrZkCk2RCiC4euiM0onSHgXa6rwSJQ33ygeXdJmEN2X8bcUMn\/ldXR8y5K","iv":"eac142cb44f6a585e801a25ae353b45e","s":"176ac0f4a9519361"}

// ** dumped crypto param is the same as the one sent **

// decrypt data
$crypto = cryptoJsAesDecrypt($secret, $crypto);

// var_dump($crypto); -> returns null
  • 写回答

0条回答 默认 最新

    报告相同问题?

    悬赏问题

    • ¥30 这是哪个作者做的宝宝起名网站
    • ¥60 版本过低apk如何修改可以兼容新的安卓系统
    • ¥25 由IPR导致的DRIVER_POWER_STATE_FAILURE蓝屏
    • ¥50 有数据,怎么建立模型求影响全要素生产率的因素
    • ¥50 有数据,怎么用matlab求全要素生产率
    • ¥15 TI的insta-spin例程
    • ¥15 完成下列问题完成下列问题
    • ¥15 C#算法问题, 不知道怎么处理这个数据的转换
    • ¥15 YoloV5 第三方库的版本对照问题
    • ¥15 请完成下列相关问题!