Encrypt data in postgres with php

Question

I need to store a number encrypted in my postgres database. I wanted to use mcrypt with the 3DES function, the encrypting and decrypting is working fine, but I can't store it in the database. My database field is char(50).

$key = "this is a secret key";
$input = "123456789";

$test = mcrypt_ecb(MCRYPT_3DES, $key, $input, MCRYPT_ENCRYPT);
$db = pg_connect("host=localhost dbname=testdb user=haxo");
$sql = "insert into test (pin) values('".$test."')";
$result = pg_query($sql); 
if (!$result) {
    $errormessage = pg_last_error();
    echo "Error with query: " . $errormessage;
    exit();
} 
pg_close();

The error I'm getting is: ERROR: unterminated quoted string at or near "'Ÿlä"

quoting php.net about "mcrypt_ecb": This function is deprecated and should not be used anymore, see mcrypt_generic() and mdecrypt_generic() for replacements. — mdo
– mdo, Commented Jul 17, 2012 at 9:10
if i try this i get: ERROR: invalid byte sequence for encoding "UTF8": 0xa3 — user1010775
– user1010775, Commented Jul 18, 2012 at 9:26

maniek · Accepted Answer · 2012-07-17 09:21:33Z

2

Make the field type BYTEA (which is for storing binary strings), then use something like PDO prepare, bindValue, execute to insert the values.

also, do You know about sql injection? The coding pattern You are using is a simple recipe for trouble.

answered Jul 17, 2012 at 9:21

maniek

7,3252 gold badges24 silver badges44 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

user1010775 Over a year ago

The number isnt from the user, so no sql injection.

Collectives™ on Stack Overflow

Encrypt data in postgres with php

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related