lazymofo
commented
1 year ago Here's a couple ideas, it's untested code. I should add more demo examples to the project.
FYI, you're not supposed to encrypt passwords, you should hash them instead. I'd recommend php's password_hash().
// option 1 - alter info before it's added to the database $lm->on_insert_user_function = 'on_insert'; $lm->on_update_user_function = 'on_update';
function on_insert(){
$_POST['password'] = password_hash($_POST['password'],PASSWORD_DEFAULT);
}
function on_update(){
$password = $_POST['password'] ?? '';
// no password then remove the key from the post so we don't blank outthe existing entry if(strlen($password) == 0){ unset($_POST['password']); return; }
// validate
if(strlen($password) < 2)
return 'Password too short';
// alter the global $_POST array
$_POST['password'] = password_hash($_POST['password'],PASSWORD_DEFAULT);
}
// option 2 - alter data AFTER it's been added to the database $lm->after_insert_user_function = 'after_insert'; $lm->after_update_user_function = 'after_update';
function after_insert($id){
global $lm;
$sql = "update table set password = my_hash(:password) where id = :id";
$lm->query($sql, array(':password' => $password, ':id' => $id));}
function after_update(){
global $lm;
$id = $_POST['id'];
$password = $_POST['password'] ?? '';
// quit if there was no password posted, btw, we can't returnvalidation errors in after_ hooks, the data has already been saved into the database if(strlen($password) <= 0) return;
$sql = "update table set password = my_hash(:password) where id = :id";
$lm->query($sql, array(':password' => $password, ':id' => $id));}
On Tue, Sep 12, 2023 at 6:26 AM DEHWall @.***> wrote:
Excellent utility for database editing!
Not an issue - just need some help with the following:
I need the ability to change the password field which is encrypted with AES_ENCRYPT() e.g. select Userid, Name, AES_DECRYPT(password,'key value') password.... from users (etc.)
After an update to the 'password' field - how would I invoke AES_ENCRYPT('new password value', 'key value') in the MySQL update?
Hope you can help Many thanks
— Reply to this email directly, view it on GitHub https://github.com/lazymofo/datagrid/issues/93, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABRM2WFU5JD7CUCMRQ2GQ2DX2BPHDANCNFSM6AAAAAA4U3OSE4 . You are receiving this because you are subscribed to this thread.Message ID: @.***>
DEHWall
Excellent utility for database editing!
Not an issue - just need some help with the following:
I need the ability to change the password field which is encrypted with AES_ENCRYPT() e.g. select Userid, Name, AES_DECRYPT(password,'key value') password.... from users (etc.)
After an update to the 'password' field - how would I invoke AES_ENCRYPT('new password value', 'key value') in the MySQL update?
Hope you can help Many thanks