thecsea/twofactor-dir

The most powerful and the simplest library to add two factor authentication by google authenticator, in every directory that you want in just one step

twofactor-dir

Build status: , _(*1)

The most powerful and the simplest library to add two factor authentication by google authenticator, for every directory that you want in just one step, _(*2)

• Add two factor in different directory with different secret
• Lock all pages and files until the correct code is inserted
• Set automatically mod rewrite redirect to insert code page until the correct code is inserted
• Update you htaccess automatically
• Easily installation in each dir in just one step
• Only one software installation location to allow you to manage it easily
• You can always set up two factor in new directories without change other installations, keeping the same software installation location

Constraints

• httacces and mod rewrite needed
• php write permission
• the date time on the server must be synchronized (only 1 minute of margin)

Download

Get/update composer

This library require composer (download composer here https://getcomposer.org/), _(*3)

Update composer, _(*4)

php composer.phar self-update, _(*5)

Download

Download via composer require (we suggest to create a dedicated directory for this), _(*6)

php composer.phar require thecsea/twofactor-dir, _(*7)

or insert library as dependency in your composer project, _(*8)

thecsea/twofactor-dir": "1.0.*, _(*9)

in the last case you have to install or update you project, _(*10)

php composer.phar install, _(*11)

or, _(*12)

php composer.phar update, _(*13)

N.B. If you don't have access to server terminal you can perform installation on your pc and upload all via ftp, _(*14)

Update twofactor-dir

You can update twofactor-dir (according to version limit set in composer.json), _(*15)

php composer.phar update, _(*16)

Use

Installation

You can set different different directory keeping only one software location, but you mustn't change it, _(*17)

Set up twofactor-dir

1. Give php write permissions to the directory where you want to set up twofactor-dir
2. Enable htacces and mod rewrite
3. open via a browser the following page and insert the directory position (preferably absolute link)

vendor/thecsea/twofactor-dir/files/install.php, _(*18)

after this you will see new files and htaccess updated, _(*19)

We suggest to hide via htaccess the twofactor-dir installation directory, _(*20)

First Use

You can get secret or QR code on YOUR_DIR/get_qr.php. We suggest to use a https connection, _(*21)

After linked a device we suggest to hide get_qr.php for not logged users in the following way:, _(*22)

CAUTION Comment RewriteRule ^get_qr.php$ get_qr.php [L,QSA] on htaccess generated after get qr for the first time, so you are able to get qr (to add more devices) only after login, _(*23)

Use

When you try to access to each page of the directory you will be redirected to insert code page, when you insert code you will be logged until the session is closed., _(*24)

You can add new devices after login (insert code page) calling YOUR_DIR/get_qr.php, _(*25)

Customize

Obviously you can customize interface modifying: * redirect.php * get_qr.php, _(*26)

Disable

You can disable twofactor-dir temporarily commenting the redirect instructions on .htaccess, _(*27)

Uninstall

To unistall twofactor-dir for a directory you have to remove the following files from your dir: * get_qr.php * redirect.php * secret.php, _(*28)

and remove the twofactor-dir lines (marked) from .htacces, _(*29)

CAUTION: You must keep the twofactor-dir installation (installation downloaded by composer) if you have set up it in other directories, _(*30)

Credits

• Sonata GoogleAuthenticator: php library to use twofactor in the same way of google authenticator

By thecsea.it