Migrate remaining encrypted-column lookups to the blind index
Completes the set of queries that matched a freshly encrypted value against a stored one, which only works while encryption is deterministic. Each keeps its original comparison and adds an index comparison in the same WHERE, so nothing changes today. - passenger sign-in by email, service-staff sign-in, Firebase token lookup - driver lookup by phone and by national number - admin ride lookup and ride monitor (both tables) - nabeh: driver status, user resolution, ride history, complaint submission transit_org_admins lives in the transit database and has no index column, so login there falls back to decrypting the small set of active admins and comparing normalised numbers. Schema: adds users.email_bidx/phone_bidx and driver.national_bidx with their indexes. Verified that every :*_bidx placeholder introduced is actually bound — an unbound one is a fatal error at request time, not a silent miss. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 5
parent
39b5a7fc7f
commit
8d7e3118b5
@@ -5,7 +5,9 @@ require_once __DIR__ . '/../connect.php';
|
||||
$national_number = filterRequest("national_number");
|
||||
|
||||
// 2. تشفير الرقم الوطني للمقارنة مع القيمة المشفرة في قاعدة البيانات
|
||||
$encryptedNationalNumber = $encryptionHelper->encryptData($national_number);
|
||||
$encryptedNationalNumber = $encryptionHelper->encryptData($national_number);
|
||||
global $blindIndex;
|
||||
$nationalBidx = $blindIndex ? $blindIndex->index('driver.national', $national_number) : null;
|
||||
|
||||
$sql = "SELECT
|
||||
COALESCE(
|
||||
@@ -73,13 +75,14 @@ $sql = "SELECT
|
||||
d.*
|
||||
FROM driver d
|
||||
LEFT JOIN CarRegistration cr ON cr.driverID = d.id
|
||||
WHERE d.national_number = :national_number;
|
||||
WHERE d.national_number = :national_number OR (:national_bidx IS NOT NULL AND d.national_bidx = :national_bidx);
|
||||
";
|
||||
// 3. تم تعديل الشرط أعلاه للبحث بالرقم الوطني
|
||||
|
||||
$stmt = $con->prepare($sql);
|
||||
// 4. ربط الباراميتر الجديد
|
||||
$stmt->bindParam(':national_number', $encryptedNationalNumber);
|
||||
$stmt->bindParam(':national_bidx', $nationalBidx);
|
||||
$stmt->execute();
|
||||
|
||||
if ($stmt->rowCount() > 0) {
|
||||
|
||||
Reference in New Issue
Block a user