Laravel使用Crypt門面實(shí)現(xiàn)數(shù)據(jù)加密解密，首先確保.env文件中存在有效的APP_KEY，通過php artisan key:generate生成；1. 使用Crypt::encryptString()加密字符串，如$encrypted = Crypt::encryptString('Hello, this is secret!')；2. 使用Crypt::decryptString($encrypted)解密數(shù)據(jù)，並用try-catch捕獲DecryptException異常；3. 在模型中可通過訪問器和修改器自動(dòng)加密存儲(chǔ)和解密讀取，如setSsnAttribute和getSsnAttribute方法；4. 注意不要用加密存儲(chǔ)密碼，應(yīng)使用Hash::make()，且APP_KEY一旦更改原有加密數(shù)據(jù)將無法解密，避免加密大量數(shù)據(jù)以減少開銷，文件加密需先加密內(nèi)容再存儲(chǔ)，總結(jié)：Laravel通過AES-256-CBC算法提供安全便捷的加密服務(wù)，合理使用Crypt門面並做好異常處理和密鑰管理即可保障數(shù)據(jù)安全。

Laravel provides a simple and secure way to encrypt and decrypt data using its built-in encryption service , which leverages OpenSSL with the AES-256-CBC cipher by default. This ensures that sensitive data (like API keys, user info, or configuration values) can be safely stored or transmitted.

Here's how you can encrypt and decrypt data in Laravel:

? 1. Use Laravel's Crypt Facade

Laravel's Crypt facade provides an easy interface for encryption and decryption. It requires that your app has a valid APP_KEY set in the .env file (which is generated automatically during installation).

Make sure your .env contains something like:

 APP_KEY=base64:your-random-base64-encoded-string

You can generate it using:

 php artisan key:generate

? 2. Encrypt Data

To encrypt data, use Crypt::encrypt() or Crypt::encryptString() .

? Use encryptString() for strings to avoid serialization issues.

 use Illuminate\Support\Facades\Crypt;

$encrypted = Crypt::encryptString('Hello, this is secret!');

This returns an encrypted string that looks like:

 eyJpdiI6Inl...

You can store this in a database or session safely.

? 3. Decrypt Data

To decrypt, use Crypt::decryptString() (for strings):

 try {
    $decrypted = Crypt::decryptString($encrypted);
    echo $decrypted; // Output: Hello, this is secret!
} catch (Illuminate\Contracts\Encryption\DecryptException $e) {
    // Handle decryption failure (eg, tampered data, wrong key)
    echo 'Decryption failed!';
}

?? Always wrap decryption in a try-catch block because invalid or tampered data will throw a DecryptException .

? 4. Example: Storing Encrypted Data in Database

Suppose you have a users table with an ssn (Social Security Number) field you want to encrypt.

In your model (optional):

 use Illuminate\Support\Facades\Crypt;

class User extends Model
{
    // Don't store raw SSN
    public function setSsnAttribute($value)
    {
        $this->attributes['ssn'] = Crypt::encryptString($value);
    }

    public function getSsnAttribute($value)
    {
        try {
            return Crypt::decryptString($value);
        } catch (\Illuminate\Contracts\Encryption\DecryptException $e) {
            return 'Decryption failed';
        }
    }
}

Now when you save:

 User::create([
    'name' => 'John Doe',
    'ssn' => '123-45-6789', // Automatically encrypted
]);

When you read:

 $user = User::first();
echo $user->ssn; // Automatically decrypted → "123-45-6789"

?? Security Notes

• Never encrypt passwords — use Hash::make() instead.
• The encryption uses your APP_KEY . If it changes, all previously encrypted data becomes undecryptable.
• Avoid encrypting large amounts of data — encryption adds overhead and storage size.
• For encrypting files, consider encrypting the file content before saving and decrypting after reading.

? Manual Encryption Without Facade (Optional)

You can also use the service container directly:

 app('encrypter')->encryptString('data');
app('encrypter')->decryptString($encryptedData);

? Summary

Basically, Laravel makes encryption simple and secure out of the box — just use Crypt::encryptString() and Crypt::decryptString() with proper error handling. Keep your APP_KEY safe and never expose decrypted data unnecessarily.

以上是如何在Laravel中加密和解密數(shù)據(jù)？的詳細(xì)內(nèi)容。更多資訊請(qǐng)關(guān)注PHP中文網(wǎng)其他相關(guān)文章！