Create and integrate a PHP-based authentication mechanism in an existing Linux/Apache web site. The athentication mechanism must prevent unauthenticated access to files and directories (rather than individual pages) in the site.
Normally this is done by placing sensitive files/directories in an area of the site that is not publicly accessible. Authenticated users can then download the files from links in their private pages that point to download scripts. Curretly there is no download script for this site. What is needed is a download script and login script that will work with SSL-encrypted pages.
Users must be able to simply click the link in the private page and download the private file with no additional authentication. This means htaccess cannot be used to protect each user's files because that would result in an already authenticated user having to enter credentials a second time in the pop up dialog that appears in the browser window when attempting to download something from an htaccess-protected directory.
Note: the site is hosted in a shared hosting environment and there is no access to [login to view URL] or other server settings.
End-to-end integration is required. Full functionality must be demonstrated in both Internet Explorer and Firefox browsers. This will include HTML programming as well as PHP to ensure proper presentation of all pages invloved.
## Deliverables
1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done.
2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables):
a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment.
b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request.
3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement).
* * *This broadcast message was sent to all bidders on Monday Mar 14, 2005 12:17:37 PM:
The description of this project has been updated and the bidding deadline exteneded. Thank you for bidding.
## Platform
Linux and/or BSD
Apache
MySql
PHP
XML
HTML