Skip to content
bemosior edited this page Aug 30, 2012 · 37 revisions

PHPasswordPusher Logo

Overview

PHPasswordPusher is a PHP port of the PasswordPusher project, which provides a more secure method for sharing sensitive information (like passwords) with others. It operates on the principal that using a soon-to-be-expiring link to retrieve sensitive information is better than having the sensitive information persist in email, chat, etc...

A user will enter the sensitive information (password, etc.) into the pwlink script, set a view and time limit, and receive a link. That link is communicated to the intended recipient, who then has until the time and view limits to retrieve the information.

Warning

At this point in time, the project is taking its first baby steps. The code is terrible, but we're working to fix that. PHPasswordPusher isn't considered reasonably secure yet, so in other words, USE AT OWN RISK.

Screenshots

screen01.jpg

screen02.jpg

screen03.jpg

Environment

PHPasswordPusher has so far been tested with the following environment:

  • Linux (RHEL 5 and CentOS 5, though other distributions would surely work.)
  • Apache
  • MySQL
  • PHP

Installation

  1. Deploy files to a web-accessible directory

  2. Change configuration options in config.php

  3. Change configuration options in mysqlinstall.php

  4. From the command-line interface, run php mysqlinstall.php (config.php is a security risk: planning to revise).

  5. Configure Apache (to be written).

Clone this wiki locally