Blancer.com Tutorials and projects

Signup / Login Script
First part of a larger project for a brand new site.

I need the SIGNUP / LOGIN / mini-site creation part (but not the actual site mini site).

It needs to be SIMPLE & SECURE.

Timeframe: soon, but not urgent (I want it quickly but do not wish to pay more to have it done urgently)

PHP 5, IT MUST be coded in PDO Php Data Objects (PHP extension) as the other part of the project will also be coded with PDO.
PHP & JavaScript validation
XHTML & CSS – no styling needed, will be based on style of the site – different project
The site will be aimed at private language tutors who teach foreign languages. (The site will only be in ENGLISH)
The main site is the sales site (www.domain.com), it offers private language tutors the ability to have a personal website promoting their services. They sign up via the online form (www.domain.com/signup.php) and have to activate their account by following the link sent to their email. On clicking this link the system creates a sub domain ie: (www.1001.domain.com), which will be their personal site. It also creates a standard template site on this sub domain that they will be able to edit by logging in. To edit their site they login via the main site (www.domain.com/login.php) and are redirected to their secure admin section ie: (www.1001.domain.com/admin.php). At a later stage a separate domain name will be purchased and pointed to their sub domain, ie: www.besttuitionabc.com > www.1001.domain.com they will however still login via (www.domain.com/login.php)
Sub domains would be created from 1001 and increase by 1 each time a new site is created.
1st site: www.1001.domain.com
2nd site: www.1002.domain.com
3rd site: www.1003.domain.com
Each sub domain will contain an independent templated site. All independent sites will use the same database. When the sub domain in created, tables will be written to the database.
So if the template site contains 3 tables (still to be defined): content, photos, links and a new site is created: www.1001.domain.com when this site is created the tables will be inserted into the Database as ‘1001content’, ‘1001photos’ & ‘1001links’.

– Complete site functionality needed if JavaScript turned off – PHP as well as JS validation.
– Must not be obfuscated as I need access to edit original code.
– I am using CPanel hosting, PHP 5
– I want sub domains created NOT htaccess and URL rewriting.
– Basic annotation of script.

Sign Up Page:
– email(username) + password + first name + last name + agree to terms check-box.
– client and server side validation: email (if already in database), password (minimum 8 characters must include a number), ‘agree to terms’ (make sure box is ticked)
– email activation > temporary URL sent via email, click to activate.
– On activation > auto creates a mini site to a new sub domain. This site will be a different project, but needs a secure admin page after signing in (see below).
– email activation include welcome message
– Error message if account signup successful but tables in database not created etc.

On activation, a script will be needed that creates a sub domain (CPanel hosting) with a mini site including creating associated files and create tables in the database. (These files and database tables will be defined separately at a later stage)

Login Page:
· Email(username) + password
· remember me – cookie option
· automatic time-out an idle session after a period of inactivity (30 mins) if remember me not ticked.
· lock account after 3 failed logins – 15 min. lockout
· JavaScript validation (on email(username) and password – error message to say email(username) incorrect format or password incorrect format)
· PHP validation – (error messages if wrong username or password – lockout: see above)
· Forgot password – email link to reset – client and server side validation on new password (minimum 8 characters must include a number)
· Login Interrupter Redirect:
If I’m trying to hit a protected page and my login cookie or session expires, I expect to be hit with a login screen. When I login, expect to be taken to the page I had requested in the first place. – is this easy or does it involves lots of extra coding?

After logged in: (in admin page)
– logout – redirects to index page
– change email – with ‘are you sure’ PHP confirmation
– change password – client and server side validation (match / check min. length & includes number)
– at top of page ‘Welcome *name*’ the name they used on the signup form.

Security:
· Passwords: md5, salt, SHA-2
· SQL injection (PDO)
· Cross site scripting
· Cross site request forgery
· Prepared statements (PDO)
· Session ID hijacking
· Form keys

This is to give you an idea of the project scope. It is not set in stone, If there are better ways of doing it than I have described then we can discuss it.

FOR INFORMATION ONLY – THESE TEMPLATE SITES ARE NOT PART OF THE PROJECT, JUST TO GIVE YOU AN IDEA OF THE OVERALL PROJECT.
All updating of content from within the admin pages of the templated sites will use the sub domain number, ie: updating the homepage header and body-text of www.1001.domain.com:

$sql = “UPDATE 1001content
SET homeheader=?, hometext=?
WHERE id=?
LIMIT 1”;
$stmt = $db->prepare($sql);
$stmt->execute(
array(
$_POST[‘homeheader’],
$_POST[‘hometext’],
$_POST[‘id’],
)
);
$stmt->closeCursor();
The sites on the sub domains will all be the same layout and be editable by logging in with the respective username and passwords. The sites will contain approx. 8 pages and include text, photo gallery, google maps, contact form.
This is what will be editable
Admin.php (this is the only page that will need to be included with the project you will be doing)
change password
change email
Index.php – introduction to services
Header (text)
Page text
upload single image
Courses.php – courses and style of working
Header (text)
page text
Location.php – where we are, how to get here
Header (text)
page text
address box – for google maps
dropdown to select zoom for google map
Gallery.php – images of us and classroom
Header (text)
page text
upload images with description.
Availability.php – dates available for tuition
Header (text)
boxy text
availability calendar – possible import Google calendar or 3rd party script
editable boxes which will allow input of hourl.y & weekly tutorial rates – this will be formatted into a table on the front of the site.
Contact.php – contact us
Header (text)
page text
contact form – sent to email address used for login.
Material.php – teaching styles, some sample language tests etc..
header (text)
page text
Links.php – links to other services – local library, Amazon dictionaries etc..
header (text)
page text
form for creating links.
THE TABLES TO BE INSERTED INTO THE DATABASE ON ACCOUNT CREATION WOULD BE SOMETHING LIKE THIS (but would also include some data to dumped)
—
— Table structure for table `content`
—

CREATE TABLE IF NOT EXISTS `content` (
`id` int(11) NOT NULL AUTO_INCREMENT,
`homeheader` tinytext NOT NULL,
`hometext` longtext NOT NULL,
`facilitiesheader` tinytext NOT NULL,
`facilitiestext` longtext NOT NULL,
`locationheader` tinytext NOT NULL,
`locationtext` longtext NOT NULL,
`zoom` tinytext NOT NULL,
`address` tinytext NOT NULL,
`ratesheader` tinytext NOT NULL,
`ratestext` longtext NOT NULL,
`availabilityheader` tinytext NOT NULL,
`availabilitytext` longtext NOT NULL,
`houlyrates` tinytext NOT NULL,
`weeklyrates` tinytext NOT NULL,
`materialheader` tinytext NOT NULL,
`materialtext` longtext NOT NULL,
`contactheader` tinytext NOT NULL,
`contacttext` longtext NOT NULL,
`linksheader` tinytext NOT NULL,
`linkstext` longtext NOT NULL,
`galleryheader` tinytext NOT NULL,
`gallerytext` longtext NOT NULL,
`googlekey` tinytext NOT NULL,
`email` tinytext NOT NULL,
PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;

— ——————————————————–
—
— Table structure for table `links`
—

CREATE TABLE IF NOT EXISTS `links` (
`id` int(10) NOT NULL AUTO_INCREMENT,
`rank` tinyint(11) NOT NULL,
`urltitle` tinytext COLLATE latin1_general_ci NOT NULL,
`url` tinytext COLLATE latin1_general_ci NOT NULL,
`urltext` tinytext COLLATE latin1_general_ci NOT NULL,
PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci AUTO_INCREMENT=77 ;

— ——————————————————–
—
— Table structure for table `photos`
—

CREATE TABLE IF NOT EXISTS `photos` (
`id` int(11) NOT NULL AUTO_INCREMENT,
`description` text NOT NULL,
`src` varchar(150) NOT NULL,
`tn_src` varchar(150) NOT NULL,
`rank` tinyint(3) NOT NULL,
PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

Upload Photo(s) Then Resize
Upload Photo(s) then resize

I am looking for a script written in PHP to accomplish the following.

This script will be executed in a membership area.

I have a script working right now, just looking to improve it.

1. User clicks on record/item. There is a link on the page to upload new photos.
We allow up to 7 photos per item and the size to display is fixed. 450 px wide x 350 px high.

What I need:
1. A form that displays 7 Select File Fields
2. When all photos to upload are selected and the users hits the upload button:
a. Error checking is preformed to make sure it is a valid jpg, gif or png. If photo is not a valid jpg, gif, or png, the same form is refreshed indicating right next to photo line item or items(s) that are invalid.
b. Checks that the file size does not exceed 15 Meg (I do want the ability to change this as a variable). If the file size is larger than 15 Meg, page will refresh indicating which item or items exceed this limit.
c. If above checks out, the original image is given the name of the item (which comes from mysql query [NAME]) it is also assigned a year number (which comes from mysql query [YEAR] and then it is given an incremental count number.

NAMING FILE FORMAT: [NAME]_[YEAR]_[Auto increment].jpg

The original File will be stored in ORIGINAL directory.

Then the script will figure out how to resize the image to fit into 450 px wide x 350 px high (image cannot exceed these parameters). A Black background color is assigned for the void space.

Once this image is created, it is given the same name as the original file and stored in IMAGE directory.

After it is written to IMAGE directory, it creates two thumbnails (same per portion) 220 px wide x 171 pw high given same file name as above stored in MED directory and then creates the final image 75 px wide x 58 px high, given same name as above and stored in SM directory.

All compression should be based on quality (we need image to display well) not compression.

d. While the above is happening, the page opens up an indicator bar showing the progress until all is completed.

If uploading multiple files, the indicator bar will display for 1st photo, and if all works OK and is completed, displays photo 1 uploaded successfully with thumbnail photo next to it, then moves on to file 2, displays indicator bar and loops until completed.

Raffle Ticket Website Needed
Hey guys.

I need a fully functional auction website. The site will be very similar to a penny auction site. However, it is a raffle ticket drawing for various products. When the auction time is up, one random ticket winner will be chosen.

Here’s how it goes:

user signs up –> user enters information –> user performs tasks for tickets –> user uses tickets on auctions –> ticket drawing

An admin control panel and a user control panel/profile page is needed.

It will be similar to this site: http://www.freebidee.com

For any questions or info, please use PMB. Thanks.