Basic PHP Backoffice + web service calls

Small, **basic backoffice written in PHP**. Includes account signup, login, forgot pass, and backoffice profile page display. Single table on mysql for management. Small updates to a simple **web service** Email notifications when profile is updated. TARGET PHP VERSION: 4.4.9 ## Deliverables Database Table to be built tbl_members =========== -id(autonumber) -folderid (integer) -fname (varchar) -lName (varchar) -email (varchar) -address (varchar) -city (varchar) -state (varchar) -zip (varchar) -dob (date) -instrument (varchar) -school (varchar) -teacherName (varchar) -relatedAccounts (varchar) -password? (varchar) -dateCreated (datetime) -signupip (varchar) -lastLogin (datetime) -lastLoginIp (varchar) -accessLevel (integer) GUI Requirements: -Backoffice needs to be built inside "/members-only/" folder -**See sample site files for startup files([login to view URL]).** **You must use the same structure when working on your server.** 1) Login page ([login to view URL]). 3 options on page: a) create a new web account: Will ask for a "folder id"(integer) and post value to direct to [login to view URL] to create account. b) Will ask for username and password and will post information to [login to view URL] c) Will have link for forgot password (will ask for member id to email password to) 2)? Signup Page ([login to view URL]). -Read variable posted to this page called "folder id" -Generate xml string similar to this using the folder id <?xml version="1.0" encoding="utf-8"?> <folderId>{folder id goes here}</folderId> -Post value to web service: [https://REMOTEADDRESS/ws/[login to view URL]][1] -Web service will return string similar to this: <?xml version="1.0" encoding="utf-8"?> <member> ? ? ? <accountexists>true</accountexists> ? ? ? <fname>Mike</fname> ? ? ? <lname>Smith</lname> ? ? ? <email>mike@[login to view URL]</email> ? ? ? <address>123 elm street</address> ? ? ? <city>San Antonio</city> ? ? ? <state>Texas</state> ? ? ? <zip>78217</zip> ? ? ? <dob>1/1/1980</dob> ? ? ? <instrument>Piano</instrument> ? ? ? <school>Hopkins Elementary</school> ? ? ? <teacherName>Debra Green</teacherName> ? ? ? <relatedAccounts>7,3,9</relatedAccounts> </member> -If xml node called "accountexists" returns "false" then show error on screen "account does not exist" and dont insert new record -If xml node called "email" returns empty then show error on screen "email address required" and dont insert record -Query tbl_membersto see if the "folder id" matches the one of an existing account. If it does, then do not add new record. Do send an email with their login information(same as forgot password) and show error message on screen "There is already an account for the member id entered. We sent you an email with your login information." -If all good, then save new record to database with values gathered from XML and create a random password (5 characters and only numbers and letters). Fill all fields of the tbl_members with the necessary values (such as signup ip, signup date), default value for the field "accessLevel" is 0 -Send email to user with new login information. -show thank you message on screen. 3) Login Process page ([login to view URL]) -This page will check the validity of the username and password entered lo allow user to login to back office. -The sql queries need to protect against sql injections. The username field will always be an integer and the password will always be a combination of numbers and letters and no spaces or special characters, so filter for that. -If the username and password dont match, then show error on screen "Username and/or password cannot be found." -If the account matches, then log in and set session variables with the following: "userID"(from the [login to view URL] field), "folderId" (from the [login to view URL] field), "accessLevel" (from the "accessLevel" field). "fname" (from the "fname" field), "lname"(from the "lname" field) -Update the db with the last login ip and last login date on the tbl_members record -redirect to [login to view URL] after login. 4) User Home Area ([login to view URL]) -This page must have an include file called "checklogin.php." This file will check if the session variable called "userId" exists or not. If the session is gone then we need to redirect to the /members-only/[login to view URL] page and show a message that the session has expired. -This page must read the database and query the table tbl_members for the current logged in user. -This page will display the following information on screen: memberId(folderid field), Fname, Lname, dob, email, phone, instrument, school, teachername, related account -This page will have a button to "update profile" and will direct to "[login to view URL]" 5) [login to view URL] -will only display the following fields for the logged in user: Fname, Lname, email and phone. Those will be the only ones available for editing. -after the form is summitted, we will generate an xml string: <?xml version="1.0" encoding="utf-8"?> <member> <folderId>123</folderId> ? ? ? <fname>Mike</fname> ? ? ? <lname>Smith</lname> ? ? ? <email>mike@[login to view URL]</email> ? ? ? <phone>210-555-5555</phone> </member> -and then post to web service: [https://REMOTEADDRESS/ws/[login to view URL]][2] -server will return: <?xml version="1.0" encoding="utf-8" ?> <status>true</status> -Need to either display "your account was updated successfully" or "error updating your account with the main office" -if the account was updated successfuly on the web service then: ? we will update values to local database ? we will email the user and email saying "Your account was recently updated at our website {website name}" ? then you will direct to main [login to view URL] with message "Your account was updated"