Skip to content
imgproxy for PHP

Signing

imgproxy can reject URLs that are not signed. Pass a Signer as the second argument of Url::create(), with the hexadecimal key and salt that are configured as IMGPROXY_KEY and IMGPROXY_SALT.

use SomehowDigital\ImgProxy\Url;
use SomehowDigital\ImgProxy\Option\Width;
use SomehowDigital\ImgProxy\Signer\Signer;


// The hexadecimal values of IMGPROXY_KEY and IMGPROXY_SALT.
$signer = new Signer('6b6579', '73616c74');


$url = Url::create(null, $signer)
    ->source('https://example.com/image.jpg')
    ->options(new Width(100));


$url->build();
// pqw5H1GsOHf_2dz4AntYKn20eioydnoxQ8pbkR-0vew/w:100/plain/https%3A%2F%2Fexample.com%2Fimage.jpg

The signature replaces the _ placeholder and covers the full path, including the masked source and the format.

Masking and signing combine:

use SomehowDigital\ImgProxy\Url;
use SomehowDigital\ImgProxy\Masker\EncodingMasker;


$url = Url::create(new EncodingMasker(), $signer);

A key or salt that is not hexadecimal throws an InvalidArgumentException.