Shadow Note is a lightweight PHP-based tool for securely sharing private or sensitive text messages via short access codes. Each message self-destructs after 10 minutes or upon expiration.
- Simple code-based access system
- No database required (uses local
.txtfiles) - Messages expire automatically after N minutes
- Password-protected admin panel
- Easy to host on any PHP server
- Secure by design (doesn't expose file paths)
- Admin logs into
/admin.php - Admin enters a message → gets a short code like
abc123 - User visits the homepage (
/) and enters the code - If the message exists and is still valid, it’s shown
- If expired or not found, an error is displayed
project/
├── index.php # User interface for entering access code
├── admin.php # Admin panel to create messages
├── data/ # Stores temporary .txt files
- Use HTTPS for secure transport
- You can protect
admin.phpwith basic auth or session login - Files are deleted after expiration automatically
- A domain name pointing to your server (or use server IP)
- A PHP-supported environment (Shared hosting or Linux VPS)
- Apache or Nginx with PHP installed
- Access to upload files (via FTP, SFTP, or control panel)
-
Upload these files to your server’s root (e.g.
/var/www/html/orpublic_html/):index.php admin.php data/ (create this folder manually) -
Ensure the
data/folder is writable:chmod 755 data
-
Access your domain:
- Admin panel:
https://yourdomain.com/admin.php - User page:
https://yourdomain.com→ enter the access code
- Admin panel:
-
Change admin credentials in
admin.php:$username = 'admin'; $password = '12345';
-
Change message expiration time (default 10 minutes):
'expire_at' => time() + 600
-
Increase code complexity:
bin2hex(random_bytes(5));
MIT — Use freely, credit appreciated!