Giter VIP home page Giter VIP logo

ppma's Introduction

No Maintenance Intended

PHP Password Manager // ppma

Requirements

  • A webserver like Apache
  • PHP 5.2 or higher
  • MySQL 5.0 or higher

Installation

  1. uncompress the downloaded archive
  2. upload the extracted files to your webserver
  3. open the ppma-url in your browser (<ppma-URL>/index.php e.g. http://example.com/index.php)
  4. follow the shown setup instructions

Problems

If you have problems with the installation (e.g. a redirect loop) check that all directories are readable by your webserver and the following directories are writable:

  • <ppma-directory>/assets
  • <ppma-directory>/protected/runtime
  • <ppma-directory>/protected/runtime/sessions

For debugging uncomment the following lines in the index.php

//defined('YII_DEBUG') or define('YII_DEBUG',true);
//defined('YII_TRACE_LEVEL') or define('YII_TRACE_LEVEL',3);

Please report founded bugs on https://github.com/pklink/ppma/issues

Building

It is not needed if you download the prebuilt release

git clone https://github.com/pklink/ppma.git
cd ppma/
composer install
npm install
./node_modules/.bin/bower install
./node_modules/.bin/grunt

Upgrading

  1. back up your database
  2. unpack the downloaded ppma-archive
  3. remove the extracted /protected/config/ppma.php
  4. copy/overwrite the unpacked files to your ppma directory
  5. run the upgrade routine in your browser (<ppma-URL>/index.php?r=upgrade e.g. http://example.com/index.php?r=upgrade)

Credits

License

This package is licensed under the BSD License. See the LICENSE file for details.

ppma's People

Contributors

anselmdk avatar bitdeli-chef avatar crossgate9 avatar intigabriel avatar pklink avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

ppma's Issues

RFE: Make entry name a link

Could the entry name be made a link as a convenience. It could either bring up the settings for the entry or go to the website, whichever seems to make the most sense.

Redirect loop?

Downloaded ppma-0.3.5.1 from sourceforge. Extracted it on my apache webserver (2.2.22 and php5). When visiting the url I get a redirect loop on /index.php?r=setup. Is there something I should be doing which isn't included in the INSTALLATION file? Thanks.

Missing controls

If the browser window is below a certain width, everything in the top bar except the "PHP Password Manager" text goes missing, so I can't create new entries, edit settings or do a simple search etc. This might make it impossible to use on small screens, so please could you devise an alternative layout for narrow windows.

Tags don't get imported from CSV

Tags from imported CSV files do not get imported

Versions affected:

  • 0.4.1

Steps to replicate

  1. Create a csv file with some entries containing tags
  • I have tried CSV files with the following tag field formatting
    • "tag1, tag2, tag3"
    • "tag1"
    • tag1
  • go to entries > import from csv
  • upload your csv file
  • click import on the entry preview screen.
    • all entries are correctly shown on this screen
  • When you are taken back to the main screen you should see all of your entries have been imported, but none of them have tags

php5-mcrypt false

Hello, thanks for this perfect code
but when I try to install it on my Debian 6.0.7 (squeeze) , I take php5-mcrypt false warning in installation page , any thoughts?
thanks


apt-get install php5-mcrypt
Reading package lists... Done
Building dependency tree
Reading state information... Done
php5-mcrypt is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 88 not upgraded.


Can't delete entries or TAGs

Whenever I need to delete an entry or a tag the php(?) code fails to render a proper html output resulting in a broken page.
See attached screenshot for details.

This happens to any of the entries I have.
Another odd thing I noticed is that the text always reads "Delete Tag" even when I try to delete an entry and not a tag.
2015-02-04_12-19-24

Document the security mechanisms used

It would be nice to know a bit more about how encryption is used in this project, so that would-be users can evaluate it easily before adoption and testing.

Things like what data is encrypted, when and how, and what is not.

Having a threat model document would be wonderful, describing common attack scenarios and whether this app is good to prevent them. Such as:

  • network sniffing (esp. in cybercafe scenarios where a mitm could be done even if you are using https, via a malevolent dns server and stolen root certs)
  • reading data in-memory of the php app (or its logs and source code)
  • are the passwords safe from dbas or anyone stealing the db
  • etc...

Setup loop

Trying to install (setup) and when I complete the user details form, I get redirected back to the start of the install (permissions check). The db tables have been created and all of them seem to be populated except for the users table. Are they other dependencies we should be aware of?

Multiple Users

Hi

i saw that you have a Sourceforge Issue on that. We would like to use PPMA to manage all Passwords in our Project. The Problem about this is, that multiple Groups (like Serveradmins which store their SSH Passwords or PR which store Forumpasswords or Facebookaccounts in it). Currently the system does not allow you to use multiple Users.

The Question is: Is it planned to implement ? If not will you take a PR for it ?

Blank page after installation Step 2

After pressing the Create Config button on Step 2 I get a blank page.

Windows 7
IIS
MySQL 5.6
PHP 5.3.6
PHP Password Manager 0.3.5.2

No log file under ppma/protected/runtime even after enabling YII_DEBUG

I copied index-test.php from the main branch, but no additional information was available.

Here are my php modules:

C:\Program Files (x86)\php-5.3.6-nts-Win32-VC9-x86>php -m
[PHP Modules]
bcmath
calendar
com_dotnet
Core
ctype
date
dom
ereg
filter
ftp
hash
iconv
json
libxml
mcrypt
mhash
mysqlnd
odbc
pcre
PDO
Phar
Reflection
session
SimpleXML
SPL
standard
tokenizer
wddx
xml
xmlreader
xmlwriter
zip
zlib

[Zend Modules]

A very simple instructional document would be helpful. For example, until I looked in the main branch of Code, I didn't realize MySQL was required. (The last released version doesn't have a readme file.)

Additional points could use clarification as well; for example, on Step 2, is the Server field the computer running MySQL or the MySQL local instance name? Is the Database field the local instance name or the schema? Etc.

Disable SSL

I accidentally enabled SSL. But now I can't access my ppma site anymore. How can I disable SSL. Is there any config file where I can do that?

Delete - ERROR 400

Hello!

I've installed ppma since a few days, everything works fine. But there is one problem: if I try to delete an entrie, i get ERROR 400.
I checked the database connection, read- and writepermissions and I installed the latest version. I installed all the the needed runtimes again, too.

Have you any idea what could be the failure ?

CSV import limited to 167 entries

I tried to import a CSV file with 333 entries, but only 167 got imported.

Expected outcome: all of the entries get imported

Versions affected:

  • 0.4.1

Steps to replicate

  1. Create a csv file with more than 167 entries
  2. go to entries > import from csv
  3. upload your csv file
  4. click import on the entry preview screen.
    * all entries are correctly shown on this screen
  5. When you are taken back to the main screen you should see that only 167 entries have been imported

QR Code

Great project ! Very useful and well realized.

But if i can propose an improvement/evolution it would be to add the ability to display a QR Code.
It happens that i need to use a password on my mobile and it's much more efficient to use my laptop to browse the site and display the password than using my iphone browser. So if i can scan the password to use it on my mobile instead of writing it manually it would be cool ^^

PHP without mCrypt?

Is is possible to use this without the need of mCrypt? I keep getting Yii issues mentioning CSecurityManager requires PHP mcrypt extension to be loaded in order to use data encryption feature. I don't have mCrypt and it's about 50 steps to install. Is there a work around for this?

Password generator

Hi!

Was wondering if a password generator feature was planned? This would really be handy for us.

Good job on this project, love how its simple and easy to use.

Disabled Login page in ppma

Dear All,

Samebody can explain who to Disabled the login page and go directly on : index.php?r=entry/index ?
I use an other kind of authentification and I would like to skip this page.
I tried some diiferente king of modification, but I can find a solution.

Thanks,

Fabien

Change Tags

Hello is there any chance to change the word TAGS to other?
And the other question is.. to see a password i need to switch to edit mode... It could be good if a button appear to watch the password.

Multi-language support

Can you add multi-language support? Is Yii Framework can make this? That will be cool and give your script more popularity. :) Thanks

Missing ppma.min.js

Hello there, i just installed the 0.3.7 tag
After follow the install process and when I go to the auth page, the console shows this error on index.php, line 18
I searched for the file on referred directory and it really isn't there.

Copy Password

When i try to copy the password using the copy button right beside the view password. It Does not copy the password.

I am using FireFox, and tried with IE as well

Upgrade wiped the entire database

I just upgraded from 0.4.2 to 0.5.0 and it's wiped the entire database :-(. Presumably it just recreated the database without checking whether it already existed. I'm not impressed.

LDAP and PPMA

hello, This is not an issue but an enhancement request to see if someone had made LDAP to sync with PPMA so the console logon details can be obtained from LDAP, please advise

RFE: Overview in Alphabetical Order

May we have an option in the settings to show the entries in the overview (and other lists) in Alphabetical order, rather than the order they were entered / retrieve from the database?

Search results pagination goes to main password list instead

When a password search results in multiple pages, trying to go to another page of the search results takes you to a page of the main password list instead of the next page of the search results

versions affected:

  • 0.3.7
  • 0.4.1

Steps to replicate:

  1. perform a search for a password that will result in multiple pages of results
  2. click on any of the page numbers or the >> to go to another page of the search results

View password button now doesn't work at all.

  1. I am unable to view passwords because the button does nothing.
  2. When creating new passwords with tags they don't get added, I have to go back and manually add in the tags afterwards.

Copy password action

Hi,

It'd be very nice to also have a "Copy" action/icon next to an entry, as to avoid entering, clearing the password to copy it.

Keep up the good work!
fred

Importing UTF-8 CSV

I imported UTF-8 CSV into the ppma.
Imported results looks normal, but imported entries values are empty after re-login.
encryptedPassword values broke.

Copy action in the list of entries

There already exists a button to copy the password in the editing view for an entry. It would be nice to have such a button directly in the list, so you do not have to open an entry to copy the password.

Upgrade from 0.3.5.1 to 0.3.7 required two upgrade passes to complete

First of all, thanks for the project.

I upgraded from 0.3.5.1 to 0.3.7 by following this upgrade path:

  1. Made dir/db backups
  2. Downloaded tarball
  3. Moved previous directory aside
  4. Copied previous conf file over to new dir
  5. Made sure that the ppma.php file was writable by the web server user
  6. Made sure assets, runtime and runtime/sessions directories were writable
  7. Ran upgrade (http://example.com/index.php?r=upgrade)
  8. Was given the congrats message and was told that the upgrade to version 0.3.6 was complete.
  9. I thought that was odd, so I logged in and confirmed that the version text at the bottom was showing the same thing.
  10. I confirmed that the version info matched what was in ppma.php
  11. I figured, "what the heck, let me try the upgrade process again. It should be smart enough to stop if there is nothing to do".
  12. After doing so, I was told that the upgrade to version 0.3.7 was complete.

Is this the normal upgrade process or a bug?

Redirect Loop During Installation

I am trying to use the app inside my VPS server from hostgator, SSL installed.

In step 1 all steps are in green,
I am using PHP 5.3
all three directories are wirtable (I did this manually using fiezilla)
The db info is right
PHP mcrypt is available in my server

Now if i proceed to step 2, then it directs me back to step1. This goes on forever, I can never login & use the app

But i can use this in my local computer when i am using xampp.

In order to use this in online server, any other configuration has to be done?

Upgrade Error

I am sorry, i am not a Linux PRO. I am trying to upgrade to version 4.00 but i am getting the following error:

"Trying to get property of non-object"

I followed the instructions on the UPGRADE text file, but seems i am missing something.

blank page after step 2

Hi! I'm getting a blank page after the step2.
LAMP server under raspbian, all conditions of step1 are ok, mcrypt is installed.
Error E_ALL, and debugging do not provide any information... Thank you in advance for any support

Batch Add Tags

It would be very nice to add a tag to multiple items in a fast way.

RFE: Add support for alternate database host port

I tried appending :3307 to the server variable like this:

<?php
return array (
  'db' => 
  array (
    'server' => '127.0.0.1:3307',
    'username' => 'root',
    'password' => 'password',
    'name' => 'ppma',
  ),
  'isInstalled' => false,
  'version' => '0.5.1',
);

and also adding a new entry to the array like this:

<?php
return array (
  'db' => 
  array (
    'server' => '127.0.0.1',
    'port' => '3307',
    'username' => 'root',
    'password' => 'password',
    'name' => 'ppma',
  ),
  'isInstalled' => false,
  'version' => '0.5.1',
);

The first resulted in an immediate error, the second just wasn't honored. Am I overlooking something or is this just not supported (yet)?

Thanks!

400 error when deleting tag

I'm using the version described below on Debian wheezy:

  • ppma (version 0.4.2) powered by yii framework (version 1.1.15) and Foundation 3 (version 3.2)

When I try to delete a tag I get a page which is blank except for "Error 400" and the tag doesn't get deleted.

Safari doesn't let you view password

I tried using Safari 7.0.1 and there are several bugs which stop stop me from viewing the passwords properly.

  1. You need to set autocompete off for the input fields while viewing them as they auto-populate using the Safari feature.
  2. When clicking the view password as text button the page refreshes and save complete dialog is presented, without letting me see the password in the first place.

If you could check these out that would be great, thanks!

Tags getting erased

I'm having an issue with tags getting erased just by opening the update window in a new tab.

browser: Google Chrome 32.0.1700.103 (Official Build 247017) (from a chromebook if that makes a difference)
versions: ppma (version 0.3.5.2) powered by yii framework (version 1.1.14) and Foundation 3 (version 3.2)
url: /ppma

*ppma only has 2 test entries

  1. first create an entry and make sure it has one or more tags

  2. go to the index.php?r=entry/index and right click on the circle for Update (the middle one) for an entry and select "open in new tab"

  3. the update entry page will show up with no tags in the form, and all tags have been erased.

    • if you have index.php?r=entry/index already opened in a new tab, you can refresh the page and see that the tags have all been erased.
    • All of the enties in the EntryHasTag table in the database also get removed.

    (this all happens just by opening the new tab, the save button wasn't clicked)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.