# fluentform/4.3.13/app/Helpers/Protector.php

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder, version 4.3.13. 74 lines.

- Page: https://pluginprobe.com/plugins/fluentform/4.3.13/code/app/Helpers/Protector.php
- Raw: https://pluginprobe.com/plugins/fluentform/4.3.13/raw/app/Helpers/Protector.php
- Modified: 2022-10-07T15:25:42+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/fluentform/4.3.13/code/app/Helpers/Protector.php#L10-L20`.

```php
<?php

namespace FluentForm\App\Helpers;

class Protector
{
    /**
     * Get the salt for the encryption and decryption.
     */
    public static function getSalt()
    {
        $salt = get_option('_fluentform_security_salt');

        if (!$salt) {
            $salt = wp_generate_password();

            update_option('_fluentform_security_salt', $salt, 'no');
        }

        return $salt;
    }

    /**
     * Encryp a text using a predefined salt.
     * 
     * @param string $text
     * @return string $text
     */
    public static function encrypt($text)
    {
        $key = static::getSalt();

        $ivlen = openssl_cipher_iv_length($cipher = "AES-128-CBC");

        $iv = openssl_random_pseudo_bytes($ivlen);

        $ciphertext_raw = openssl_encrypt($text, $cipher, $key, $options = OPENSSL_RAW_DATA, $iv);

        $hmac = hash_hmac('sha256', $ciphertext_raw, $key, $as_binary = true);

        return base64_encode($iv . $hmac . $ciphertext_raw);
    }

    /**
     * Decrypt a text using a predefined salt.
     * 
     * @param string $text
     * @return string $text
     */
    public static function decrypt($text)
    {
        $key = static::getSalt();

        $c = base64_decode($text);

        $ivlen = openssl_cipher_iv_length($cipher = "AES-128-CBC");

        $iv = substr($c, 0, $ivlen);

        $hmac = substr($c, $ivlen, $sha2len = 32);

        $ciphertext_raw = substr($c, $ivlen + $sha2len);

        $original_plaintext = openssl_decrypt($ciphertext_raw, $cipher, $key, $options = OPENSSL_RAW_DATA, $iv);

        $calcmac = hash_hmac('sha256', $ciphertext_raw, $key, $as_binary = true);

        if (hash_equals($hmac, $calcmac)) // timing attack safe comparison
        {
            return $original_plaintext;
        }
    }
}

```