PHPackages dachcom-digital/secure-storage - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. dachcom-digital/secure-storage ActivePimcore-bundle[Security](/categories/security) dachcom-digital/secure-storage ============================== Pimcore Security Storage Bundle v1.1.1(1y ago)12.7k↑175%[1 issues](https://github.com/dachcom-digital/pimcore-secure-storage/issues)GPL-3.0-or-laterPHPCI failing Since Nov 18Pushed 2mo ago1 watchersCompare [ Source](https://github.com/dachcom-digital/pimcore-secure-storage)[ Packagist](https://packagist.org/packages/dachcom-digital/secure-storage)[ Docs](https://github.com/dachcom-digital/pimcore-secure-storage)[ RSS](/packages/dachcom-digital-secure-storage/feed)WikiDiscussions master Synced 1mo ago READMEChangelog (2)Dependencies (7)Versions (4)Used By (0) Pimcore Secure Storage Bundle ============================= [](#pimcore-secure-storage-bundle) --- Important This bundle will **not** be compatible with Pimcore 12 or any future Pimcore versions. For all future development, updates, and documentation, please refer to [opendxp.io](https://www.opendxp.io): - Access the latest info here: - Migration of Dachcom Digital Bundles: **Note:** We are open to partnerships for those interested in porting this bundle to future versions. For inquiries, please contact: --- [![Software License](https://camo.githubusercontent.com/cad8c16a3d580a69d8923c98d8de25d21cb00fa54fa60a856a8e1ca657f79db4/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d47504c76332d627269676874677265656e2e7376673f7374796c653d666c61742d737175617265)](LICENSE.md)[![Software License](https://camo.githubusercontent.com/e97037437574223b9032209d2ded216fae3bacdc9e5eeed04eb89f2b83a97ba7/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d44434c2d77686974652e7376673f7374796c653d666c61742d73717561726526636f6c6f723d253233666635633563)](LICENSE.md)[![Latest Release](https://camo.githubusercontent.com/bfccc55feed07605a8f64ca199500f69e7a82a219b00b786f9f889872f7fca2f/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f64616368636f6d2d6469676974616c2f7365637572652d73746f726167652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/dachcom-digital/secure-storage) ### Release Plan [](#release-plan) ReleaseSupported Pimcore VersionsSupported Symfony VersionsRelease DateMaintainedBranch**1.x**`^11.3``^6.4`--Feature BranchmasterInstallation ------------ [](#installation) ``` "require" : { "dachcom-digital/secure-storage" : "~1.0.0", } ``` Add Bundle to `bundles.php`: ``` return [ SecureStorageBundle\SecureStorageBundle::class => ['all' => true], ]; ``` Description ----------- [](#description) Encrypt/Decrypt assets on the fly! Required PHP Extensions ----------------------- [](#required-php-extensions) - openssl Usage ----- [](#usage) Caution This is a very, very dangerous bundle which can lead to heavy data loss, if you're not careful! Please read the instructions carefully! Safety Instructions ------------------- [](#safety-instructions) - Do not define paths with existing assets. Create a new folder or delete all assets first. Those assets can't be opened after defined (since they're not encrypted) - You'll never be able to remove those paths from configuration. If you have to, you need to download the assets from backend first - Do not change the key, after you pushed this to production. Encrypted assets will be end up corrupt Limitations ----------- [](#limitations) - The secure adapter only supports the `LocalFilesystemAdapter`. This is fine, since other adapters like aws or cloudflare usually already support encryption by default - Thumbnails can't be generated, since pimcore uses the `getLocaleFileFromStream` method in `TemporaryFileHelperTrait`. This is something we might can fix in the near future Configuration ------------- [](#configuration) ### File Encryption [](#file-encryption) ``` secure_storage: encrypter: options: cipher: 'aes-128-cbc' # default key: 'your-12-bit-key' # create your key with base64_encode(openssl_random_pseudo_bytes(16)); secured_fly_system_storages: # form builder (if you want to encrypt form builder data) - storage: form_builder.chunk.storage - storage: form_builder.files.storage # pimcore - storage: pimcore.asset.storage paths: - /secure-storage - /formdata ``` #### Custom Encrypter [](#custom-encrypter) TBD --- ### Asset Protection [](#asset-protection) ``` secure_storage: pimcore_asset_protection: # protects: # - public/var/assets [pimcore.asset.storage] # - public/tmp/asset-cache [pimcore.asset_cache.storage] # - public/tmp/thumbnails [pimcore.thumbnail.storage] htaccess_protection_public_directories: paths: - /secure-storage omit_backend_search_indexing: paths: - /secure-storage ``` --- Upgrade Info ------------ [](#upgrade-info) Before updating, please [check our upgrade notes!](UPGRADE.md) License ------- [](#license) **DACHCOM.DIGITAL AG**, Löwenhofstrasse 15, 9424 Rheineck, Schweiz [dachcom.com](https://www.dachcom.com), Copyright © 2024 DACHCOM.DIGITAL. All rights reserved. For licensing details please visit [LICENSE.md](LICENSE.md) ### Health Score 31 — LowBetter than 68% of packages Maintenance45 Moderate activity, may be stable Popularity22 Limited adoption so far Community7 Small or concentrated contributor base Maturity41 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~31 days Total 3 Last Release 483d ago ### Community Maintainers ![](https://avatars.githubusercontent.com/u/700119?v=4)[Stefan Hagspiel](/maintainers/solverat)[@solverat](https://github.com/solverat) --- Top Contributors [![solverat](https://avatars.githubusercontent.com/u/700119?v=4)](https://github.com/solverat "solverat (32 commits)") --- Tags securityencryptionpimcoreFlystem ### Code Quality TestsCodeception Static AnalysisPHPStan Code StyleECS Type Coverage Yes ### Embed Badge ![Health badge](/badges/dachcom-digital-secure-storage/health.svg) ``` [![Health](https://phpackages.com/badges/dachcom-digital-secure-storage/health.svg)](https://phpackages.com/packages/dachcom-digital-secure-storage) ``` ### Alternatives [phpseclib/phpseclib PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc. 5.6k434.8M1.3k](/packages/phpseclib-phpseclib)[defuse/php-encryption Secure PHP Encryption Library 3.9k162.4M214](/packages/defuse-php-encryption)[ass/xmlsecurity The XmlSecurity library is written in PHP for working with XML Encryption and Signatures 955.6M30](/packages/ass-xmlsecurity)[nzo/url-encryptor-bundle The NzoUrlEncryptorBundle is a Symfony Bundle used to Encrypt and Decrypt data and variables in the Web application or passed through URL 961.0M2](/packages/nzo-url-encryptor-bundle)[tilleuls/url-signer-bundle Create and validate signed URLs with a limited lifetime in Symfony 81340.1k](/packages/tilleuls-url-signer-bundle)[ercsctt/laravel-file-encryption Secure file encryption and decryption for Laravel applications 642.6k](/packages/ercsctt-laravel-file-encryption) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)