Hi, I would like to have a user management system for a website with the following specs:
(1) allows user registration, authentication, logout, timeout and client-connected detection.
(2) password recovery mechanism and enhanced login (robot verification) starting from 4th failed login attempt.
(3) black-list and freeze accounts after about 5 failed logins
(4) based on php and mysql for the core functionalities
(5) members are divided in 3, group1, group2 and group3 (expansion possible)
(6) certain members can communicate with others based on a flag variable
(7) messages can be public (like in a forum) and private (like in any messenger app)
(8) messages are to be stored with some backup mechanism
(9) password Hashes, Salts, Policies, anti-phishing and all security measures are to be implemented against hacking
(10) all session variables are to be made clearly accessible by the admin and can be used to enhance or modify certain function later by myself
(11) the admin (myself) should be able to add fields to the users table AND to create additional tables and link them to the users table if needed, to be used within sessions
(12) readiness to provide few hours of post-purchase support
Please quote separately:
(A) if you would add automatic notifications of messages like for instance the arrival of a message (facebook style)
(B) if you were asked to provide support (per hour ) for eventual modifications