Skip to content

A PHP-based login page with polypmorphic features and customization. Suitable for small project that need a little security.

License

Notifications You must be signed in to change notification settings

alternat0r/phpLindung

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 

Repository files navigation

phpLindung

It is a simple script to provide a simple login page for PHP. It is also configurable to have polymorphic features by randomizing view on client source code such as variable, spacing, capitalization and garbage code.

The code are PoC only. It is based on Zubrag.com code with extensive modification: http://www.zubrag.com/scripts/password-protect.php

NOTE: Lindung in Malay means Protect.

Usage

Just simply put the following code on top of your code:

<?php include "lindung.php"; ?>

And your page will be lock until user input a correct username/password.

1

2018-05-04_23-34-12

The following are the settings you might change according to your needs:

/*
==============================================
  Polymorphic settings
============================================== */
define('POLY_ON', true);         // true=enable all features, false=disable all features
define('POLY_NEWLINE', false);   // true=enable random multiline
define('POLY_SPACE', true);      // true=enable random white spaces if found any single space
define('POLY_CAPITAL', true);    // true=all character will be randomly in either upper or lower case
define('POLY_GARBAGE', true);    // true=add multi line of random html tag, comments, etc.; Limited to newline only

NOTE: Please refer to the source code comments for more information about the usage.

Features

  1. Add random spaces
  2. Add random capitalization
  3. Add random newline
  4. Add random hidden garbage code
  5. Random variable.
  6. Random cookie
  7. Minimalistic UI.

Limitation

  1. Some browser may not support on certain types of randomization.
  2. Not tested on mobile phone. Expect some bugs.
  3. Not suitable for commercial usage. Need more secure approaches.
  4. Random capitalization letter may not work well on URL and hotlinks.
  5. Tested on PHP 5-5.6 only

License

  1. GNU General Public License v3.0
  2. Meh, feel free to modify and use.

References

  1. http://www.zubrag.com/scripts/password-protect.php

About

A PHP-based login page with polypmorphic features and customization. Suitable for small project that need a little security.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages