SecureString

Available since release 4.0.0

stubbles\lang\SecureString provides a reasonable secure storage for security-sensitive lists of characters, such as passwords. It prevents accidentially revealing them in output, by var_dump()ing, echo()ing, or casting the object to array. All these cases will not show the password, nor the crypt of it.

However, it is not safe to consider this implementation secure in a cryptographically sense, because it does not care for a very strong encryption, and it does share the encryption key with all instances of it in a single PHP instance.

When using this class, you must make sure not to extract the secured string and pass it to a place where an exception might occur, as it might be exposed as method argument.