62309 PHP MySQL Human Authentication

We are seeking a web programmer experienced in coding secure PHP & MySQL applications with add-on skills in SSL, HTML & JavaScript. Who has the ability to integrate scripts into web-based forms and widely used Content Management Systems. SCOPE OF WORKS: This project is small in size requiring the creation of a single PHP server script to authenticate access to web resources that is then integrated into a web form for end user interaction. The MySQL DB has been pre-configured and will be available to the professional during development, there is only minor consultation required from the professional on the MySQL DB setup. This project is estimated to be approximately 100 lines of code (taken from existing PHP script examples) and 20-30 hours work time, including testing (taken from professional sources). BACKGROUND: We are a team of entrepreneurs who have obtained worldwide IP rights for methods of securely displaying data, this innovation can be implemented in multiple products that we are currently bringing to market. This project is to get the authentication script product completed and to market. BUSINESS PRACTICE: The professional working on this project will be asked upload a comprehensive project plan including milestones, to sign a written transfer of copyright ownership for all works completed and a non-disclosure agreement for all communications and project work that occurs. This is to ensure continued protection to our intellectual property rights, if the need arises additional information will be provided. SCRIPT & DB REQUIREMENTS: 1. Security of the PHP script and MySQL DB connections are foremost on this project. The script is to provide secure access to web resources and both script and DB connections must be secure and include defence against hacking attempts. We will require some consultation on whether SSL can be optionally used (if required by customer) without affecting the functionality of the script? 2. Once a MySQL record has been called by the script it must be either discarded from the DB or marked as used, as every record must only be used once. 3. Script must be configurable to request a variable number of records from the DB (1 or more) at random from the DB, each time it is run. 4. Script must randomly determine which of the requested\displayed records will be used for authentication each time it is run and display this on the form to the user (e.g. record\image set 3 of 4 is to be used). 5. Script is required to retrieve every image stored in a DB record. Each DB record can\will contain multiple image fields (2 or more) so the script must be easily configurable to retrieve the total number of image fields in the DB each time it is run. 6. The images cannot be newly generated on the fly by the PHP GD library the script must request the images from the DB, either locally administered or from providers' web server. 7. The images in the DB could be in .gif .jpg or .png format and could have a multitude of attributes. Will be of any size (within reason) but will generally be horizontal and rectangular in shape. The form must display the images effectively regardless of end users resolution, browser or window size. 8. Script will optionally need to request text data from a secure text field in each DB record, configurable (on\off) variable is required. This is not a\the password field, but contains key information that must be provided to the end user. 9. Script must authenticate the string a user enters into the form field with the password field from the correct required record in the DB and either allow or deny access to the resource based on this response. Passwords will be stored in a VARCHAR or BLOB field and must be encrypted using MD5, SHA1, AES or DES. We require consultation from the chosen programmer on the most robust password encryption algorithm and which MySQL field option out of VARCHAR and BLOB should be used? 10. Script will require a seperate PHP configuration script (e.g. [login to view URL]) for DB connection data and required variables for efficient setup by website owners and webmasters. 11. Script\web form must include a regenerate button option to allow an end user to reload a new batch of records and images, if they are unable to identify and supply the required password successfully. EXISTING SCRIPTING EXAMPLES: The closest current example of web programming that we can refer to, to assist quoting professionals for this project, would be PHP CAPTCHA scripts. Please refer to the process and method followed by the more recent\secure of these scripts to obtain an outline of the authentication method we require for this project. [login to view URL] [login to view URL] QUESTIONS: (1) What is your total time and cost estimate to complete this project and your current availability? (2) How would you approach the password encryption, secure transmission with MySQL DB and randomisation requirement that this project involves? (3) Can you detail your web programming experience and provide examples of previously coded secure PHP scripts that requires a MySQL DB? Additional examples of SSL or authentication experience would also be welcomed. FUTURE REQUIREMENTS: We will most likely have a requirement to port\convert the application from PHP to ASP (.net) and MSSQL, are you in a position to migrate the final application successfully? We believe the best approach is to code the application in PHP\MySQL and port across to ASP\MSSQL using a professional armed with conversion software. This is not within the scope of this initial project but professionals with experience and understanding in converting between these languages would be preferentially considered for further development of this and other projects.