ishannz/secure-elemental-userforms

Adds a secure usersforms

dev-main 2024-01-14 21:40 UTC

Requires

• php: ^8.1
• dnadesign/silverstripe-elemental: ^4.0
• dnadesign/silverstripe-elemental-userforms: ^3.3
• madmatt/silverstripe-encrypt-at-rest: dev-master
• silverstripe/framework: ^4.10
• silverstripe/userforms: ^5.0
• silverstripe/vendor-plugin: ^1.0

Requires (Dev)

• phpunit/phpunit: ^9.6
• squizlabs/php_codesniffer: ^3

BSD-3-Clause

• John Milmine

• silverstripe
• element
• userforms
• Content Blocks
• elemental

README

Introduction

This module integrates with dnadesign/silverstripe-elemental-userforms and silverstripe/silverstripe-userforms. This feature enables secure storage of submitted data in the database. By default, all form data is securely stored in the database. However, you can choose to disable this feature in the configuration tab and save the data as plain text instead.

Requirements

• SilverStripe 4.x

Installation

composer require ishannz/secure-elemental-userforms

Once installed, you need to generate an encryption key that will be used to encrypt all data.

1. Generate a hex key with vendor/bin/generate-defuse-key (tool supplied by defuse/php-encryption). This will output a ASCII-safe key that starts with def.
2. Set this key as the environment variable ENCRYPT_AT_REST_KEY.

For development environments you can set this in your .env e.g:

ENCRYPT_AT_REST_KEY="{generated defuse key}"

For more information view SilverStripe Environment Management.

Usage

Refer the following link https://github.com/madmatt/silverstripe-encrypt-at-rest/blob/master/README.md#usage