本指南介紹了如何在 Laravel 模型中實(shí)現(xiàn)敏感數(shù)據(jù)的加密和解密。通過執(zhí)行以下步驟，您可以在將數(shù)據(jù)存儲到數(shù)據(jù)庫之前保護(hù)數(shù)據(jù)并在檢索數(shù)據(jù)時對其進(jìn)行解密。

?先決條件

• Laravel：確保您使用的是 Laravel 項(xiàng)目。
• 加密密鑰：Laravel 在 .env 文件中自動生成 APP_KEY。該密鑰由 Laravel 的加密服務(wù)使用。

? ?第 1 步：在模型中設(shè)置加密

在模型中，我們將使用 Laravel 的 encrypt() 和 decrypt() 函數(shù)自動處理指定字段的加密和解密。

? ?Doctor模型

使用加密和解密方法創(chuàng)建或更新Doctor模型。我們將在將名字、姓氏、電子郵件和手機(jī)等字段保存到數(shù)據(jù)庫之前對其進(jìn)行加密。

<?phpnamespace AppModels;use IlluminateDatabaseEloquentModel;use IlluminateSupportFacadesCrypt;class Doctor extends Model{
    protected $fillable = [
        &#39;first_name&#39;, &#39;last_name&#39;, &#39;email&#39;, &#39;mobile&#39;, &#39;hashed_email&#39;, &#39;password&#39;
    ];

    // Automatically encrypt attributes when setting them
    public function setFirstNameAttribute($value)
    {
        $this->attributes['first_name']?=?encrypt($value);
????}

????public?function?setLastNameAttribute($value)
????{
????????$this->attributes['last_name']?=?encrypt($value);
????}

????public?function?setEmailAttribute($value)
????{
????????$this->attributes['email']?=?encrypt($value);
????}

????public?function?setMobileAttribute($value)
????{
????????$this->attributes['mobile']?=?encrypt($value);
????}

????//?Automatically?decrypt?attributes?when?getting?them
????public?function?getFirstNameAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getLastNameAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getEmailAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getMobileAttribute($value)
????{
????????return?decrypt($value);
????}}

?????說明

• Setter 方法：使用 set{AttributeName }Attribute() 在數(shù)據(jù)存儲到數(shù)據(jù)庫之前對數(shù)據(jù)進(jìn)行加密。
• Getter 方法：從數(shù)據(jù)庫檢索數(shù)據(jù)時，使用 get{AttributeName}Attribute() 解密。

第 2 步：數(shù)據(jù)存儲和檢索的控制器

在控制器中，您可以處理驗(yàn)證并調(diào)用模型的 直接加密屬性，無需額外加密/解密 步驟。

? ?????DoctorController

DoctorController 通過驗(yàn)證來處理注冊 輸入數(shù)據(jù)，通過模型對其進(jìn)行加密，并將其保存在數(shù)據(jù)庫中。 獲取醫(yī)生數(shù)據(jù)時，會自動解密 敏感字段。

<?phpnamespace AppHttpControllers;use IlluminateHttpRequest;use AppModelsDoctor;use IlluminateSupportFacadesHash;class DoctorController extends Controller{
    public function register(Request $request)
    {
        // Validate the incoming request
        $validatedData = $request->validate([
????????????'first_name'?=>?'required|string|max:255',
????????????'last_name'?=>?'required|string|max:255',
????????????'email'?=>?'required|string|email|max:255|unique:doctors,email',
????????????'mobile'?=>?'required|string|size:10|unique:doctors,mobile',
????????????'password'?=>?'required|string|min:8|confirmed',
????????]);

????????//?Hash?the?email?to?ensure?uniqueness
????????$hashedEmail?=?hash('sha256',?$validatedData['email']);

????????//?Create?a?new?doctor?record?(model?will?handle?encryption)
????????$doctor?=?Doctor::create([
????????????'first_name'?=>?$validatedData['first_name'],
????????????'last_name'?=>?$validatedData['last_name'],
????????????'email'?=>?$validatedData['email'],
????????????'hashed_email'?=>?$hashedEmail,
????????????'mobile'?=>?$validatedData['mobile'],
????????????'password'?=>?Hash::make($validatedData['password']),
????????]);

????????return?response()->json([
????????????'message'?=>?'Doctor?registered?successfully',
????????????'doctor'?=>?$doctor
????????],?201);
????}

????public?function?show($id)
????{
????????//?Fetch?the?doctor?record?(model?will?decrypt?the?data?automatically)
????????$doctor?=?Doctor::findOrFail($id);

????????return?response()->json($doctor);
????}}

Schema::create('doctors',?function?(Blueprint?$table)?{
????$table->id();
????$table->text('first_name');
????$table->text('last_name');
????$table->text('email');
????$table->string('hashed_email')->unique();?//?SHA-256?hashed?email
????$table->text('mobile');
????$table->string('password');
????$table->timestamps();});

<?phpnamespace AppModels;use IlluminateDatabaseEloquentModel;use IlluminateSupportFacadesCrypt;class Doctor extends Model{
    protected $fillable = [
        &#39;first_name&#39;, &#39;last_name&#39;, &#39;email&#39;, &#39;mobile&#39;, &#39;hashed_email&#39;, &#39;password&#39;
    ];

    // Automatically encrypt attributes when setting them
    public function setFirstNameAttribute($value)
    {
        $this->attributes['first_name']?=?encrypt($value);
????}

????public?function?setLastNameAttribute($value)
????{
????????$this->attributes['last_name']?=?encrypt($value);
????}

????public?function?setEmailAttribute($value)
????{
????????$this->attributes['email']?=?encrypt($value);
????}

????public?function?setMobileAttribute($value)
????{
????????$this->attributes['mobile']?=?encrypt($value);
????}

????//?Automatically?decrypt?attributes?when?getting?them
????public?function?getFirstNameAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getLastNameAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getEmailAttribute($value)
????{
????????return?decrypt($value);
????}

????public?function?getMobileAttribute($value)
????{
????????return?decrypt($value);
????}}

以上是Laravel 中的數(shù)據(jù)加密和解密的詳細(xì)內(nèi)容。更多信息請關(guān)注PHP中文網(wǎng)其他相關(guān)文章！