The main idea behind "EFC/XFSS - Enhanced File Crypt/Extended File Stealth System" is to have your uploaded files safe in the server in a way that, even if someone can get them, no one can read them without knowing a few details to decrypt the files.
The class uses a random trick to select the encryption method that is used. This will always generate diferent encrypted files.
The file names are also obfuscated, so a sneaker will not know what the original format was.
This class was mainly developed to be used with GPL'ed Care2002 Medical Information System (www.care2x.org). However, its use was postponed because most of the files uploaded were images and most of them do not have any personal identifiable info on them.
This class, in a broader sense, has yet a long way to go. For now it is simply a sub-class of part of the RC4Crypt class. It allows an easy process of encryption and decryption of uploaded files. It requires libmcrypt support and, when possible, an SSL internet connection to be used.
The class needs mcrypt PHP functions. The next challenge will be to encrypt and decrypt the files at client side, perhaps with Javascript, for those that cannot have an SSL connection, and also the creation of a replacement class for those that do not have the possibility to use libmcrypt.
The only files that you need to look at into are index.php, srcefc.php, mkconfig.php and .htaccess (the last one to use in the secured directory for strict security if you can not put it outside Web document tree).
The documentation is inside these PHP scripts.
You also need to search for the definition of __SECURE_PATH__, and modify the path in the above PHP files.
This class can be used to encrypt and decrypt data with mcrypt extension.
It can encrypt a data block using a given key. The encrypted data is returned encoded with a variant of the base64 encoding algorithm that replaces +, / and = characters by -, _ and empty string.
The class can also do the opposite, i.e. decrypt the data with the same key after decoding the base64 encoded encrypted data.
Ratings
Utility
Consistency
Documentation
Examples
Tests
Videos
Overall
Rank
All time:
Perfect (100.0%)
Good (95.0%)
-
Good (90.0%)
-
-
Sufficient (68.5%)
259
Month:
There are not enough user ratings to display for this class.
If you are sending sensitive instructions from on page to another, it is often important to hide and protect what you are sending to prevent cross site scripting and other malicious attempts to hack your sites and applications.
The shield class protects your data by using mcrypt to encrypt the information into a hashed value. This is then sent as one value unreadable value. For example a standard GET form would send data like so...
but doing so my unintentionally open your scripts to manipulation. The shield class combines all this data into one value so people can no longer observe what data is being sent. It would turn the above example into...
Each encrypted value contains a digital id. One that you set and the directory path that the script resides in. If neither match the data is not decrypted and is returned as false.
Now this script also features javascript DES encryption methods that have been linked from another opensource work. This usage enables people to propvide form submission encryption to data in non https forms. A simple example is supplied ( - NOTE : you will ahve to download a font from a seperate server, the url is in the example.keyimg.php file)
This class implements a SSH client to securely execute shell commands in a remote server using an encrypted communications channel.
This class is not based on any PHP extension specifically meant to implement the SSH protocol. It only requires the PHP extensions bcmath and mcrypt.
It can connect to a SSH server, authenticate with given user and password, execute given commands and retrieve the commands output returned by the server.
Currently the class only supports SSH protocol version 1.