This fork aims to add two factor authentication to enforce the phpvirtualbox login method. Sonata GoogleAuthenticator project is used to validate tokens, source code here: https://github.com/sonata-project/GoogleAuthenticator.

In this first rudimentary version 2FA is mandatory, and Authenticator seeds must be specified manually for each user into config.php configuration file. If no seed is specified for a user, it won't login (this also includes the admin).

You can specify user seeds in config.php, adding an array like this:

var $user_token_seed = [
    'admin' => '0123456789ABCDEF',
    'user1' => '123456789ABCDEFG',
    'user2' => '23456789ABCDEFGH',
    ...
];

phpVirtualBox is from 2017 maintained by Smart Guide Pty Ltd (tudor at smartguide dot com dot au)

with support from various contributors (see https://github.com/phpvirtualbox/phpvirtualbox/graphs/contributors)

Originally Copyright (C) 2015 Ian Moore (imoore76 at yahoo dot com)

FREE, WITHOUT WARRANTY:

All files of this program (phpVirtualBox) are distributed under the terms contained in the LICENSE.txt file in this folder unless otherwise specified in an individual source file. By using this software, you are agreeing to the terms contained therein. If you have not received and read the license file, or do not agree with its conditions, please cease using this software immediately and remove any copies you may have in your possession.

1. Download zip file from GitHub project site: https://github.com/legolabs/phpvirtualbox/archive/master.zip

2. Unzip the zipfile into a folder accessible by your web server

3. Rename config.php-example to config.php and edit as needed.

Read the wiki for more information : https://github.com/phpvirtualbox/phpvirtualbox/wiki

Default login is username: admin password: admin

Please report bugs / feature requests to GitHub https://github.com/phpvirtualbox/phpvirtualbox/issues

Rename the file recovery.php-disabled to recovery.php, navigate to it in your web browser, and follow the instructions presented.