PHP将图片加密写入数据库并解密读取

加密写入

// 生成随机 IV
$iv = openssl_random_pseudo_bytes(openssl_cipher_iv_length('AES-256-CBC'));
// 加密图片数据
$encrypted_image1_data = base64_encode(openssl_encrypt(file_get_contents($image1), 'AES-256-CBC', $web_site_key, 0, $iv));
$encrypted_image2_data = base64_encode(openssl_encrypt(file_get_contents($image2), 'AES-256-CBC', $web_site_key, 0, $iv));

// 准备 SQL 语句
$stmt = $conn->prepare("INSERT INTO encrypted_images (image1_data, image2_data, phone_number, iv,uid) VALUES (?, ?, ?, ?,?)");

// 绑定参数并执行 SQL 语句
$stmt->bindParam(1, $encrypted_image1_data);
$stmt->bindParam(2, $encrypted_image2_data);
$stmt->bindParam(3, $phone_number);
$iv_base64 = base64_encode($iv);
$stmt->bindParam(4, $iv_base64);
$stmt->bindParam(5, $uid);

try {
  if ($stmt->execute()) {
    $array = array(
      "code" => 200,
      "msg" => "提交成功"
    );
    $apidata = json_encode($array);
    echo $apidata;
  } else {
    throw new Exception("插入失败");
  }
} catch (Exception $e) {
  $array = array(
    "code" => 400,
    "msg" => $e->getMessage()
  );
  $apidata = json_encode($array);
  echo $apidata;
} finally {
  exit;
}

解密读取

// 获取需要解密的记录
  $stmt = $conn->prepare("SELECT phone_number, image1_data, image2_data, iv FROM encrypted_images WHERE id = :id");
  $stmt->bindParam(':id', $id);
  $stmt->execute();

  $row = $stmt->fetch(PDO::FETCH_ASSOC);

  // 解密图像数据
  $iv = base64_decode($row['iv']);
  $decrypted_image1_data = openssl_decrypt(base64_decode($row['image1_data']), 'AES-256-CBC', $web_site_key, 0, $iv);
  $decrypted_image2_data = openssl_decrypt(base64_decode($row['image2_data']), 'AES-256-CBC', $web_site_key, 0, $iv);

  // 可以将解密后的图像数据保存为文件或显示在页面上
  // file_put_contents('decrypted_image1.jpg', $decrypted_image1_data);
  // file_put_contents('decrypted_image2.jpg', $decrypted_image2_data);
  // 或者以base64的格式返回
  $array = array(
    "code" => 200,
    "phone" => $row['phone_number'],
    "img1" => base64_encode($decrypted_image1_data),
    "img2" => base64_encode($decrypted_image1_data)
  );
  $apidata = json_encode($array);
  echo $apidata;
  exit;