• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1750
  • Last Modified:

Encrypt in javascript then decrypt in php

I'm trying to find a way to encrypt something in javascript and decrypt it in php. anyone come across something like this. Thanks!
0
ocsurf
Asked:
ocsurf
2 Solutions
 
BrianGEFF719Commented:
Hi ocsurf,
Here is the problem with that, you're going to have to embed some type of encryption key in the javascript routine which will make decrypting the same text rather trivial by anyone. Have you considered a hash?

For example if this is a password related issue, you can MD5 the password, send it to the server and compare to the password in a database that is also md5 hashed. Make sense? Which is completely irreversible.

-Brian
0
 
ocsurfAuthor Commented:
Yea i thought and tried that. but the problem is we are logging into a ldap server and don't have access to the passwords.
0
 
Mark GilbertSenior Performance EngineerCommented:
As brian said, anything in javascript will be seen by the user.  Simple fact.  If you are looking for php encryption then there are lots of samples of code that could be used.  There are dozens of freely available scripts out there, however, they are all opensource, and chances are they could be decrypted.  However, it also depends on how secure your site is.  If you utilize ssl, along with authentication and encryption then you should be looking at a pretty sound, but not perfect system to rely on.  Always patch your code, and operating system along the way to ensure integrity of the data.
0
 
BrianGEFF719Commented:
There is really no secure way to encrypt data on client side.
0
 
ellandrdCommented:
Do you really need to encrypt in javascript?  

Without knowing the specifics of your task, may i suggest that you enter the string that you want encrypted into a html form, then using the POST method, send it to a php page for encryption and comparison against your reference encrypted string.

This method would keep prying eyes out of your encryption process, as it would be handled via your php script.

Remember, it is possible to automatically send forms if this is what you'd like to do.

If you can clarify your task, then i can perhaps help further..
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now