If you are an administrator/sysadmin struggling to find a secure place for all your web applications, this project is for you..
PHPMyLogin's goal is to give you as an admin, a place on the web, where you can put all your administrative tools without worrying about securing it from the public. You can login using all kinds of methods, password, ldap, one time password and much more. Its module based login design makes it easy to create new login methods.
The best way to see what PHPMyLogin can do is to take a look at the feature list!
If you want more to read, see documentation.
Also take a look at more unfisnished stuff @ readme, faq and install.
As you might have understood by now, this project isn't complete yet. I will try to do more writings now and then, but the first priority is to get out a real release.
I cannot really set any time on when, but I'm hoping on maybe februar 09. I want everything stable first!
As a side note; this isn't a new started project for me, I have almost all code ready, but I must to it more user-friendly, and clean-up the code. I first started this project, private for one and a half year ago (dec 08).
If you want to see a very basic demo, take a look at http://boa.nu/phpmylogin/ (up again :) ) It's not configured 100% but its to get an idea of how it is.
I will create a little yubikey generator so you can try it out.
If you are in mood, hammer away on it, try to find any security issues. If you manage to make it bail with an error that might be a information leak, it will prompt for an password. The password in this setup is “admin123”.
Will make a better demo soon.
Everything is starting to fall into place now. Lots of polishing lately! I will try to get a demo up and running soon. Currently I'm using PHPMyLogin with SSL support (ssl client cert), yubikey, sms otp auth and captcha. It works pretty well, but I'm still finding some small bugs from time to time which need some fixing..
I am currently working most on polishing everything, and the admin interface.
btw: Looks like we got the keygen attribute into the html5 specs! Wonderful news! Maybe the browsers can coop on one single key generation standard soon…
I have now removed the old trunk folder from svn and updated it to the version i'm rewriting on. Note that the current version in trunk in svn are still none working! I'm doing work on it almost daily, but there is still lots of work left. If you want to help, please tell!
When I feel that the code is stable enough, and most important, working. I will release an real version on sf.net. But until then, you can take a look and try to find security issues in the trunk :)
To download:
svn co https://phpmylogin.svn.sourceforge.net/svnroot/phpmylogin/trunk phpmylogin
Or you can view the source tree from http://phpmylogin.svn.sourceforge.net/viewvc/phpmylogin/trunk/
If anyone have any good install scripts (setup.php) kinda, please contact me! (lars dot solberg on gmail) I will aslo be very thankful for any ideas on setup script.
Its not that I don't have any install script now, but the one I have is making me sick. Its a mess! I don't like the mix of javascript, and weird hacks to store setting values between screens.
I will still try to get some code out before the end of February. But please don't judge the phpmylogin on the setup script!
There still isnt any release. I have spent much time on fixing up code, and stabilizing everything. From the login screen to actual login, things still doesnt work, but since I'm in a middle of a big rewrite, thats no surprise :)
I will release an early alpha when it works from login-screen to logged in.. Probably mid/end-february..
