Authenticator_ciacob

This package can be used to register and authenticate users with records in a database.

It can register new users, confirm user registrations, authenticate existing users and retrieve user password to send by e-mail as reminders.

The user records are stored in database. The queries to perform each user record database access are defined in a XML configuration file.

Features list:
# Open or closed registration, via master password;
# User role support;
# Live authentication (changing session unique id from one request to another);
# Password recovery OR reset support;
# Hack prevention built-in system:
* logs user out when obsolete session id is used;
* logs user out if IP address changes from one request to another;
* logs user out when session lifetime times out;
* auto-locks user on too many failed login attempts; locks are IP-based and can be reset by master.
# Easy to configure, via external XML files (provided by ParamsProxy package, see dependencies);
# SQL injections proof, thanks to built-in database traffic encoding/decoding mechanism (provided by DbProxy package, see dependencies).