62790 Powerlines Script Upgrades

I want the following upgrades to Keith Appleby's GPA script. Experience with this script will be a plus. It's a php/Mysql script for Unix. You should have an excellent knowledge of PHP and security. I have already found and repaired many security flaws with this script. I would still like it scrutinized by a programmer, who REALLY knows php security issues, for any potential existing flaws. Here's what I need: Ability to delete accounts via admin page. I have the code for this, but it needs a small tweak to work right. Increased security against unpaid sign ups. If someone advances to the second payment page, without first paying the admin, the script should forward the user back to the first payment page. If someone advances to the actual membership sign up page, without paying the admin and affiliate fees, the script should forward the user back to the first payment page. Ideally, there should be a way to test this without making payments. Should record I.P. address into DB, and disallow repeat sign ups from the same I.P.. I want this code written into the sign up form page, so I can easily have other sign up forms without it, to allow override ability for admin. On sign up, currently If someone chooses a username that is taken, when they go back to the form, it clears itself, so they have to start over. I want this fixed, so they don't lose their data. Also need new member sign up form validation to ensure mandatory fields are entered before form will submit. Currently when members login, the display reads "You are now logged in.. thank you. Click here to continue." I want this removed, and have members advanced directly to the login area. Need second (sub) login area - when members click links leading to this second login area, script must check for two things: 1) session_register('loggedin') (as the first login area does), and 2) check the DB for members where Status = 'ACTIVE'. If it does, members move seemlessly on to the next page, WITHOUT having to login again. If Status DOES NOT = ACTIVE, it then checks, if Status = '', if true, it searches the DB for the number of signs ups that member has made, If that number is less than 2, show text error message "Sorry, bla bla bla bla bla...." with a link to upgrade their account, and another link to our promo area. The link to upgrade will go to a special payment page, calling up their sponsor's payment links. If the number is 2 or more, script changes DB Status to 'ACTIVE', and advances the member into the sub login area. If Status = 'ACTIVE' is false, and Status = '' is false, script checks for Status = 'unpaid'. If true, show text error message "Sorry, but you have not paid to access this area." with a link to upgrade their account. Link calls up their sponsor's payment links, as before. New special free sign up page that will query the DB to check and make sure that the sponsor has more than two sales, before approving sign ups. If the sponsor has not qualified (has made less than 2 sales), sign up will not perform! Main script needs these additions: Currently new member welcome emails are sent to admin separately. I want that changed to BCC (blind carbon copy). Add IP address, sponsor, and Status info directly into the welcome emails, so I don't have to chk the DB to see who they joined under! Members notified of indirect (powerline) sales by email as they happen. This feauture should email members the name and email of the powerline sale, as well as the name and email of the person who made the direct sale. Example email: Congratulations, name! You just made a powerline sale from [insert name here, insert email here]. You should take a moment, and congratulate your downline, and also welcome your new downline member, [insert name here, insert email here]. Members area main page should welcome member by name, and also show their sponsors name and username. Password retrieval Need automatic lost password and username retrieval - they enter their email into a form, and their username and password gets sent to them, along with their affiliate link, which is simply my [login to view URL], and some text. Script should be a one step process, and give success results like: "Success! Your affiliate membership information has been emailed to you at (user's email displayed here).", or likewise, failure results: "Sorry, that email address does not exist in our database." send mail to members feature adds in back slashes into the emails when you have a ', so if I type "don't", it comes out as "don\'t." - this is not critical, but it would be great to fix it. I will also need a money doubler added SOON, but that will be a separate project. Thanks! Jim