Proposal Title
Urgent Full-Stack Developer (PHP and Frontend) for Authentication Management Platform – 1 Week
Project Description
Project Summary
We are seeking a highly qualified full-stack developer available to work intensively for 1 week on the development and optimization of our authentication management platform. The project requires seamless integration between the frontend and backend, ensuring a secure and efficient user experience within a very limited timeframe.
Current Project Structure
The current folder structure of our project is as follows:
project/
├─ admin/
│ ├─ [login to view URL] // Administrator credentials (optional)
│ ├─ [login to view URL]
│ └─ [login to view URL] // (Request OTP, etc.)
│
├─ login/
│ ├─ login1/
│ │ ├─ [login to view URL] // Only requests OTP
│ │ └─ [login to view URL] // Processes OTP
│ ├─ login2/
│ │ ├─ [login to view URL]
│ │ └─ [login to view URL]
│ ├─ ...
│ └─ login10/
│ ├─ [login to view URL]
│ └─ [login to view URL]
│
├─ includes/
│ ├─ [login to view URL]
│ ├─ [login to view URL]
│ └─ [login to view URL]
│
├─ config/
│ └─ [login to view URL]
│
├─ api/
│ ├─ [login to view URL] // API using external service
│ └─ [login to view URL] // API using local database
│
├─ [login to view URL] // Manages multiple steps
└─ ...
Project Objectives
Backend Development and Optimization (PHP):
Review and optimize existing PHP scripts.
Implement additional security functions for managing authentication and sensitive data.
Facilitate administrator interaction with user information and OTP requests.
Implement a BIN verification API using a third-party solution or a local database.
Frontend Development:
Design intuitive and responsive user interfaces for all forms and panels.
Enhance user experience through real-time validations and appropriate feedback.
Implement dynamic interactions using JavaScript (may include frameworks like React or Vue.js if necessary).
Adapt and rebuild the existing 10 logins using tools like httrack or wget, based on the provided prototypes.
Integration and User Flow:
Ensure each step of the authentication flow is accessible only if previous steps have been completed.
Implement redirects and access restrictions based on sessions.
Develop an interactive Admin Dashboard where the administrator can manage users, request OTPs, and view the status of authentications.
Security:
Ensure the protection of sensitive data (personal information).
Implement HTTPS and other recommended security practices.
Protect against common vulnerabilities such as SQL Injection, XSS, CSRF, etc.
Testing and Deployment:
Conduct thorough functionality and security testing.
Assist in deploying the project to a production environment (may include Docker, VPS servers, etc.).
User Flow
Step 1: Enter First Code
The user accesses [login to view URL] and completes a form with a first code (could be a tracking number, initial PIN, etc.).
Step 2: Retention Alert
An alert is displayed informing the user that their shipment is being held due to lack of information. The user must confirm to continue.
Step 3: Update Shipping Information
After confirming the alert, the user is redirected to a second form where they update their shipping information (name, address, phone, etc.).
Step 4: BIN and Owner Information Request
The user completes a form requesting the BIN number of their card and the owner's information.
Implementation of the BIN verification API: Before redirecting the user to the corresponding login, the card's BIN is verified to determine which of the 10 logins to redirect to.
Step 5: Redirection Based on Card BIN
Depending on the BIN (first 6 digits) of the entered card, the user is redirected to login/login1/[login to view URL], login/login2/[login to view URL], ..., up to login/login10/index.php.
In the corresponding login, the user must enter their login credentials.
Administrative Process:
The administrator views the user's information (including user agent, IP, country, time zone, browser type, device type, login time, logout time, and the time each piece of information is added).
The administrator decides whether to request the user to enter the OTP.
The administrator can redirect the user to the index, request login credentials again, or request the OTP as many times as necessary.
OTP Entry
If the administrator decides to request the OTP, the user is redirected to the corresponding login section to enter the requested OTP.
Admin Dashboard
The administrator can view and manage all information entered by users, including OTP requests and detailed data of each user session.
Freelancer Requirements
Necessary Technical Skills
Backend:
Solid experience in PHP and related frameworks (e.g., Laravel, Symfony) is an advantage.
Advanced knowledge in session handling, authentication, and security in PHP.
Experience with databases (MySQL, PostgreSQL) and query optimization.
Implementation of RESTful APIs for functionalities like BIN verification.
Frontend:
Proficiency in HTML5, CSS3, and JavaScript.
Experience with modern frameworks/libraries such as React, Vue.js, or Angular (preferably).
Ability to create responsive and user-friendly interfaces.
Knowledge of tools like httrack or wget to reconstruct or adapt existing logins from prototypes.
Integration and API:
Experience in consuming and integrating RESTful APIs.
Knowledge in using tools like cURL, Postman for API testing.
Web Security:
Familiarity with best web security practices.
Experience in implementing HTTPS, secure data handling, and preventing common vulnerabilities.
Version Control:
Use of Git for version control and code collaboration.
Other Skills:
Ability to work autonomously and meet established deadlines.
Good communication skills to report progress and discuss needs.
Desired Experience
Minimum of 3 years experience developing complete web applications (frontend and backend).
Demonstrable portfolio of similar projects, preferably with implementations of authentication systems.
Previous experience integrating authentication solutions and managing sensitive information.
Experience in integrating multiple types of logins (10 logins) with the ability to copy and implement existing prototypes using tools like httrack or wget.
Expected Deliverables
Backend:
Optimized and secure PHP scripts.
Functions for managing authentication and OTP requests.
Implementation of a BIN verification API (using a third-party solution or a local database).
Integration with external APIs if necessary.
Frontend:
User interfaces designed and developed for all forms and panels.
Implementation of real-time validations and UX/UI improvements.
Adaptation and reconstruction of the existing 10 logins using tools like httrack or wget, based on the provided prototypes.
Logins Integration:
Integrate the 10 existing logins into the login/ directory, using the already developed prototypes.
Ensure each login functions correctly within the authentication flow.
Admin Dashboard:
Interactive panel for the administrator to manage users, request OTPs, and monitor the status of authentications.
Advanced Functionalities:
Visualization of user agent, IP, country, time zone, browser type, device type, login time, and logout time of users.
Recording of the time each piece of information is added by the user.
Ability to request the OTP as many times as necessary.
Options to redirect the user to the index, request login credentials again, among other administrative actions.
Documentation:
Detailed technical documentation on the developed code.
Deployment guide and production environment configuration.
Testing:
Reports of conducted functionality and security tests.
Correction of errors found during testing.
Timeline and Budget
Estimated Timeline:
1 week (urgent). Intensive availability is required during this period.
Budget:
USD 222 (adjustable based on the freelancer's experience and proposal). Considered an adequate budget due to the urgency and tight deadline.
How to Apply
If you meet the mentioned requirements and are available to work intensively on this project for one week, please submit:
Portfolio of similar projects.
Detailed proposal outlining how you would approach the project within the established timeframe.
References or testimonials from previous clients (if available).
Availability and hourly rate or final budget.
Estimated daily work time to meet the deadline.
Contact
You can reach out through the freelancer platform where this offer is posted. I will be available to answer any additional questions and discuss more project details.