Encrypt PHP query string value in URL

Question

Here is my question, i am trying to hide address value in URL

URL is something like this

example.com/linkdl/preview/index.php?address='http://mysiteexample.com'

I am trying to hide, ?address='http://mysiteexample.com' part, but i am not sure, what is best way

i have an idea to use base64_encode($adresa), but i am not sure will i have problems with (encoding/decoding special) characters in URL

$click = 'OtvoriProzor("'.$file_path.'&pk='.$sesija->pk.'&adresa='.base64_encode($adresa).
                    '&IDIstorijaElement='.$element->GetId().'", "Prevod", 700, 500);';

This is very insecure, can add some function for encryption, to encrypt and decrypt parametar, or will md5 help me here. Also should i use function url_decode url_decode instead?

use POST instead of GET... and when you want to secure your data, use https instead of http — Halayem Anis
– Halayem Anis, Commented Feb 4, 2015 at 8:20
Please specify for what purpose you want to "hide" that value. Aesthetic reasons? "Security"? Secrecy? What exactly do you need to protect then from whom? — deceze
– deceze ♦, Commented Feb 4, 2015 at 8:20
Secrecy i want to prevent direct download, its address for direct download, its impossible to use post because system is based on GET — Vladimir Stus
– Vladimir Stus, Commented Feb 4, 2015 at 8:23
Provide more details. Download from where? Where would one get such a link from? How would encrypting that value fundamentally provide an improvement. — deceze
– deceze ♦, Commented Feb 4, 2015 at 8:26

Phate01 · Accepted Answer · 2015-02-04 08:25:24Z

5

Since md5 is a hash algorithm, you won't be able to get back what you encoded. You can use base64 and urlencode to avoid problems with some characters:

<?php
$url = urlencode(base64_encode($adresa));
?>

And you will decode it with:

<?php
$addr = base64_decode(urldecode($_GET['adresa']));
?>

edited Feb 4, 2015 at 8:25

answered Feb 4, 2015 at 8:16

Phate01

1,8573 gold badges34 silver badges58 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Vladimir Stus Over a year ago

can i use crypt functions

deceze Over a year ago

1) Your decoding needs to be reversed, 2) this is merely light obfuscation, nothing is hidden here.

Phate01 Over a year ago

You won't get the clean url in the GET parameter, I don't have to reverse anything

deceze Over a year ago

If you first base 64 encode, then url encode, you need to reverse this by first url decoding, then base 64 decoding.

Collectives™ on Stack Overflow

Encrypt PHP query string value in URL

1 Answer 1

4 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related