Simple-and-secure-accounts

A simple and secure php login framework with data-filtering and encryption using modern techniques.

Table of contents

• Usage
  • Prerequisites
  • Steps
• Features
• References
• Contributors
• License

Usage

Until we reach version 1.0 the module won't have an interface or full security. However, most features are currently supported or at least partially implemented.

The default user from sql/secure_accounts.sql contains these values:

• Username : testuser
• Email : [email protected]
• Password : Test123

Prerequisites

Name	Description	Version
Apache	The Apache HTTP Server is a free and open-source cross-platform web server.	Any
PHP	Hypertext Preprocessor is a server-side scripting language designed for web development.	PHP 5.3 or newer
MySQL	MySQL is an open-source relational database management system.	Any

Steps

• Change the variables in includes/psl-config.php to match your MySQL database connection.
• Run sql/secure_accounts.sql or add the structure to your MySQL database.

Features

• Setup interface.
  • Run and modify SQL query
  • Modify settings
• Users
  • Log in
  • Two-factor authentication
  • Remember
  • Register
  • Log out
  • Profile
    • Picture
    • Password reset
    • E-mail change
  • Permissions
    • Hidden pages
    • Hidden content
    • Access based on level
• Protection
  • SQL injection
  • Session hijacking
  • Brute-force attacks
  • XSS
  • Covert timing channel attacks

References

SQL injection

Session hijacking

Brute-force attack

Cross-site Scripting

Covert Timing Channel

Contributors

• Fly-d-e-v

License

This project is licensed under the MIT License. Licenses of tools and dependencies are not included and may vary.