This package can be used to register and authenticate users with records in a database. It can register new users, confirm user registrations, authenticate existing users and retrieve user password to send by e-mail as reminders. The user records are stored in database. The queries to perform each user record database access are defined in a XML configuration file. Features list: # Open or closed registration, via master password; # User role support; # Live authentication (changing session unique id from one request to another); # Password recovery OR reset support; # Hack prevention built-in system: * logs user out when obsolete session id is used; * logs user out if IP address changes from one request to another; * logs user out when session lifetime times out; * auto-locks user on too many failed login attempts; locks are IP-based and can be reset by master. # Easy to configure, via external XML files (provided by ParamsProxy package, see dependencies); # SQL injections proof, thanks to built-in database traffic encoding/decoding mechanism (provided by DbProxy package, see dependencies).