StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PODecrypting certain fields from a mysql database using PHP
primarykey
Id
20771959
data
AcceptedAnswerId
0
AnswerCount
1
ClosedDate
CommentCount
1
CommunityOwnedDate
CreationDate
2013-12-25T10:52:01.863
FavoriteCount
0
LastActivityDate
2013-12-25T10:54:44.187
LastEditDate
LastEditorUserId
0
OwnerUserId
2894258
ParentId
0
PostTypeId
1
Score
0
ViewCount
360
LastEditorDisplayName
text
Body
I have this PHP script <pre><code> <?php //assume this is the key, declared as variable $cipherKey in the file cipherkey.php. include ('cipherkey.php') class Cipher { private $passKey; private $iv; function __construct( $inputKey ) { $this->passKey = hash( 'sha256', $inputKey, true ); $this->iv = mcrypt_create_iv( 32 ); } function encryptThis( $inputText ) { $cipher = mcrypt_encrypt( MCRYPT_RIJNDAEL_256, $this->passKey,$inputText, MCRYPT_MODE_ECB, $this->iv ); $encrypted = base64_encode( $cipher ); return $encrypted; } function decryptThis( $inputText ) { $decipher = mcrypt_decrypt( MCRYPT_RIJNDAEL_256, $this->passKey, base64_decode( $inputText ), MCRYPT_MODE_ECB, $this->iv ); $decrypted = trim( $decipher ); return $decrypted; } } ?> </code></pre> This script is used to encrypt certain fields in a mysql database like this; <pre><code>if( isset( $prescRequester, $patientName, $patientDOB, $contactPhone, $medType1, medType1_dose, $medType1_freq, $pharmacyName, $pharmacyPhone ) ) { $prep = $db->prepare( "INSERT INTO renal_prescRequest( date, prescRequester, patientRelationship, patientName, patientDOB, contactPhone, contactEmail, physician, medProvider, medType1, medType1_dose, medType1_freq, medType2, medType2_dose, medType2_freq, medType3, medType3_dose, medType3_freq, ninetyDaySupply, pharmacyName, pharmacyPhone, comments ) VALUES ( ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? ) "); $prep->bind_param( 'ssssssssssssssssssssss', $date, $cipher->encryptThis( $prescRequester ), $cipher->encryptThis( $patientRelationship ), $cipher->encryptThis( $patientName ), $cipher->encryptThis( $patientDOB ), $cipher->encryptThis( $contactPhone ), $cipher->encryptThis( $contactEmail ), $physician, $medProvider, $cipher->encryptThis( $medType1 ), $medType1_dose, $medType1_freq, $cipher->encryptThis( $medType2 ), $medType2_dose, $medType2_freq, $cipher->encryptThis( $medType3 ), $medType3_dose, $medType3_freq, $ninetyDaySupply, $pharmacyName, $pharmacyPhone, $comments ); $prep->execute(); $prep->close(); $db->close(); </code></pre> I am not this author of this code. But I am supposed to decrypt the encrypted fields. So I did something like this ; <pre><code> $cipher = new Cipher ( $cipherKey ); $id = $_GET['id']; $query = "SELECT * FROM renal_clinicalTrial WHERE id = '".$id."'"; $result = mysql_query($query); if(!$result){ die("Unable to perform query". mysql_error()); } while($row = mysql_fetch_array($result)){ $firstname = $row[firstName]; $lastname = $row[lastName]; $address = $row[address]; $city = $row[city]; $state = $row[state]; $zipcode = $row[zipcode]; $email = $row[contactEmail]; $phone = $row[contactPhone]; $cipher->decryptThis($firstname); $cipher->decryptThis($lastname); $cipher->decryptThis($address); $cipher->decryptThis($city); $cipher->decryptThis($state); $cipher->decryptThis($zipcode); $cipher->decryptThis($email); $cipher->decryptThis($phone); </code></pre> When i display the fields to the browser, I get the encrypted data instead of the decrypted data. Is there something I am overlooking here. Thanks!
Tags
<php><mysql><sql><encryption>
Title
Decrypting certain fields from a mysql database using PHP
singulars
PostAcceptedAnswerId
1. This table or related slice is empty.
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. This table or related slice is empty.
UserOwnerUserId
1. USDamilare Binutu
plurals
PostLinksPostIdRelatedPostId
1. PL
 singulars
 LinkTypeLinkTypeId
 LTLinked
2. PL
 singulars
 LinkTypeLinkTypeId
 LTLinked
PostLinksRelatedPostIdPostId
1. This table or related slice is empty.
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
VotesPostIdCreationDate
1. This table or related slice is empty.
CommentsPostId
1. CO**Warning:** you're using [a **deprecated** database API](http://stackoverflow.com/questions/12859942/why-shouldnt-i-use-mysql-functions-in-php) and should use a [modern replacement](http://php.net/manual/en/mysqlinfo.api.choosing.php). You are also **vulnerable to [SQL injection attacks](http://bobby-tables.com)** that a modern API would make it easier to [defend](http://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php) yourself from. *This is especially frightening as you seem to use medical data*. Why don't you use the `mysqli_*` functions in the first code fragment?
 singulars
 PostPostId
 PODecrypting certain fields from a mysql database using PHP
 UserUserId
 USMarcel Korpel

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.