How to encrypt url in c# in networks tab when we run the application

Create a common method to encrypt url and then use this on every anchor tag and wherever you use url then on server side decrypt it.

example

public static class EncryptDecryptHelper
{
private const string AesIV256 = @"sachinsinghsecretkey";
private const string AesKey256 = @"akilodkyebfjSecret";
public static string Encrypt(string text)
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;
// Convert string to byte array
byte[] src = Encoding.Unicode.GetBytes(text);
// encryption
using (ICryptoTransform encrypt = aes.CreateEncryptor())
{
byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length);
// Convert byte array to Base64 strings
return Convert.ToBase64String(dest);
}
}
///
/// AES decryption
///
public static string Decrypt(string text)
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;
// Convert Base64 strings to byte array
byte[] src = System.Convert.FromBase64String(text);
// decryption
using (ICryptoTransform decrypt = aes.CreateDecryptor())
{
byte[] dest = decrypt.TransformFinalBlock(src, 0, src.Length);
return Encoding.Unicode.GetString(dest);
}
}
public static string EncryptUrl(string text)
{
if (!string.IsNullOrWhiteSpace(text))
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;
// Convert string to byte array
byte[] src = Encoding.Unicode.GetBytes(text);
// encryption
using (ICryptoTransform encrypt = aes.CreateEncryptor())
{
byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length);
// Convert byte array to Base64 strings
return HttpUtility.UrlEncode(Convert.ToBase64String(dest));
}
}
return string.Empty;
}
public static string EncryptUrl(this object text)
{
if (!string.IsNullOrWhiteSpace(text.ToString()))
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;
// Convert string to byte array
byte[] src = Encoding.Unicode.GetBytes(text.ToString());
// encryption
using (ICryptoTransform encrypt = aes.CreateEncryptor())
{
byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length);
// Convert byte array to Base64 strings
return HttpUtility.UrlEncode(Convert.ToBase64String(dest));
}
}
return string.Empty;
}
///
/// AES decryption
///
public static string DecryptUrl(string text)
{
if (!string.IsNullOrWhiteSpace(text) && text!= "undefined")
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;
text = text.Replace("%2b", "+").Replace("%2f", "/").Replace("%3d", "=");
// Convert Base64 strings to byte array
byte[] src = System.Convert.FromBase64String(text);
// decryption
using (ICryptoTransform decrypt = aes.CreateDecryptor())
{
byte[] dest = decrypt.TransformFinalBlock(src, 0, src.Length);
return HttpUtility.UrlDecode(Encoding.Unicode.GetString(dest));
}
}
return string.Empty;
}
public static string EncodeBase64(string plainText)
{
var plainTextBytes = System.Text.Encoding.UTF8.GetBytes(plainText);
return System.Convert.ToBase64String(plainTextBytes);
}
public static string DecodeBase64(string base64EncodedData)
{
try
{
var base64EncodedBytes = System.Convert.FromBase64String(base64EncodedData);
return System.Text.Encoding.UTF8.GetString(base64EncodedBytes);
}
catch(Exception ex)
{
return string.Empty;
}
}
#region SHA HASH
public static string SHA512(string input)
{
var bytes = System.Text.Encoding.UTF8.GetBytes(input);
using (var hash = System.Security.Cryptography.SHA512.Create())
{
var hashedInputBytes = hash.ComputeHash(bytes);
// Convert to text
// StringBuilder Capacity is 128, because 512 bits / 8 bits in byte * 2 symbols for byte
var hashedInputStringBuilder = new System.Text.StringBuilder(128);
foreach (var b in hashedInputBytes)
hashedInputStringBuilder.Append(b.ToString("X2"));
return hashedInputStringBuilder.ToString();
}
}
#endregion
}

use the encryptUrl method on views and decryptUrl method on controller

"/Controller/[email protected](item.Id+ "_" + SessionHelper.CurrentSession.Id)"> ID

On the controller dycrypt it

public ActionResult Action(string id)
{
if (id != null)
{
int Id = 0;
long UserId = 0;
var IncDocId = EncryptDecryptHelper.DecryptUrl(id);
var ids = IncDocId.Split('_');
int.TryParse(ids[0], out Id);
long.TryParse(ids[1], out UserId);
if (SessionHelper.CurrentSession.Id == UserId)
{
// do something
}
}

Note:- you don't need to think about sessonHelper that is my extra layer for security.

3 Replies

Know the answer? Post it — somebody with the same question will find it here.

Sachin Singh4y ago
Accepted answer
Create a common method to encrypt url and then use this on every anchor tag and wherever you use url then on server side decrypt it.
example
public static class EncryptDecryptHelper
{
private const string AesIV256 = @"sachinsinghsecretkey";
private const string AesKey256 = @"akilodkyebfjSecret";

public static string Encrypt(string text)
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;

// Convert string to byte array
byte[] src = Encoding.Unicode.GetBytes(text);

// encryption
using (ICryptoTransform encrypt = aes.CreateEncryptor())
{
byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length);

// Convert byte array to Base64 strings
return Convert.ToBase64String(dest);
}
}

///

/// AES decryption
///
public static string Decrypt(string text)
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;

// Convert Base64 strings to byte array
byte[] src = System.Convert.FromBase64String(text);

// decryption
using (ICryptoTransform decrypt = aes.CreateDecryptor())
{
byte[] dest = decrypt.TransformFinalBlock(src, 0, src.Length);
return Encoding.Unicode.GetString(dest);
}
}

public static string EncryptUrl(string text)
{
if (!string.IsNullOrWhiteSpace(text))
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;

// Convert string to byte array
byte[] src = Encoding.Unicode.GetBytes(text);

// encryption
using (ICryptoTransform encrypt = aes.CreateEncryptor())
{
byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length);

// Convert byte array to Base64 strings
return HttpUtility.UrlEncode(Convert.ToBase64String(dest));
}
}
return string.Empty;
}

public static string EncryptUrl(this object text)
{
if (!string.IsNullOrWhiteSpace(text.ToString()))
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;

// Convert string to byte array
byte[] src = Encoding.Unicode.GetBytes(text.ToString());

// encryption
using (ICryptoTransform encrypt = aes.CreateEncryptor())
{
byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length);

// Convert byte array to Base64 strings
return HttpUtility.UrlEncode(Convert.ToBase64String(dest));
}
}
return string.Empty;
}

///

/// AES decryption
///
public static string DecryptUrl(string text)
{
if (!string.IsNullOrWhiteSpace(text) && text!= "undefined")
{
// AesCryptoServiceProvider
AesCryptoServiceProvider aes = new AesCryptoServiceProvider();
aes.BlockSize = 128;
aes.KeySize = 256;
aes.IV = Encoding.UTF8.GetBytes(AesIV256);
aes.Key = Encoding.UTF8.GetBytes(AesKey256);
aes.Mode = CipherMode.CBC;
aes.Padding = PaddingMode.PKCS7;

text = text.Replace("%2b", "+").Replace("%2f", "/").Replace("%3d", "=");
// Convert Base64 strings to byte array
byte[] src = System.Convert.FromBase64String(text);

// decryption
using (ICryptoTransform decrypt = aes.CreateDecryptor())
{
byte[] dest = decrypt.TransformFinalBlock(src, 0, src.Length);
return HttpUtility.UrlDecode(Encoding.Unicode.GetString(dest));
}
}
return string.Empty;
}

public static string EncodeBase64(string plainText)
{
var plainTextBytes = System.Text.Encoding.UTF8.GetBytes(plainText);
return System.Convert.ToBase64String(plainTextBytes);
}

public static string DecodeBase64(string base64EncodedData)
{
try
{
var base64EncodedBytes = System.Convert.FromBase64String(base64EncodedData);
return System.Text.Encoding.UTF8.GetString(base64EncodedBytes);
}
catch(Exception ex)
{
return string.Empty;
}
}
#region SHA HASH
public static string SHA512(string input)
{
var bytes = System.Text.Encoding.UTF8.GetBytes(input);
using (var hash = System.Security.Cryptography.SHA512.Create())
{
var hashedInputBytes = hash.ComputeHash(bytes);

// Convert to text
// StringBuilder Capacity is 128, because 512 bits / 8 bits in byte * 2 symbols for byte
var hashedInputStringBuilder = new System.Text.StringBuilder(128);
foreach (var b in hashedInputBytes)
hashedInputStringBuilder.Append(b.ToString("X2"));
return hashedInputStringBuilder.ToString();
}
}
#endregion
}
use the encryptUrl method on views and decryptUrl method on controller
"/Controller/[email protected](item.Id+ "_" + SessionHelper.CurrentSession.Id)"> ID
On the controller dycrypt it
public ActionResult Action(string id)
{
if (id != null)
{
int Id = 0;
long UserId = 0;
var IncDocId = EncryptDecryptHelper.DecryptUrl(id);
var ids = IncDocId.Split('_');
int.TryParse(ids[0], out Id);
long.TryParse(ids[1], out UserId);

if (SessionHelper.CurrentSession.Id == UserId)
{
// do something
}
}
Note:- you don't need to think about sessonHelper that is my extra layer for security.
+3
Sachin Singh4y ago
yes, easily, razor variable are available inside script
@model yourModel
@using Common.EncryptDecryptHelper   // your helper class
// your view here //
+2
Anusha G4y ago
Can we do this in JQuery?
+2