Job Title
Secure Membership Platform Developer – Private, Verified, NFC & Event Access (Fraternity)
Project Description
We are building a protected, private membership portal for Black Bro Phi Fraternity (BBΦ).
This system must be security-first, verification-based, privacy-protected, and adult-only.
It is not a public community, not a social network, and not open access.
What You’re Building
A protected membership portal where:
There is no public browsing of member pages
Users cannot guess URLs to access anything
Only verified and approved members can log in
The public can only access limited verification pages (no private data)
Access Control (Required – Default Deny)
Every portal page must require authentication
If a user is not logged in → redirect to /login
If a user is logged in but not approved → redirect to /waitlist-status
This must fully prevent access by shared or guessed links.
Membership Approval Gate
Users may create an account, but cannot access any member features until approved.
Membership statuses:
pending – account created, awaiting approval
approved – full access
suspended – access blocked
expired – blocked until renewed
Rules:
pending, suspended, and expired users cannot enter portal pages
Only approved members may access the system
Role-Based Permissions (Owner Has Full Authority)
Roles required:
owner (highest authority)
executive_admin
chapter_admin
staff
member
Rules:
Owner has full and unrestricted system access, including all data, settings, chapters, members, logs, approvals, suspensions, deletions, and permissions
Executive admins have full system access except owner-only controls
Chapter admins manage their chapter roster only
Staff have search and support access only (no approval or removal rights)
Members see member-only pages only
All permissions must be enforced server-side.
Privacy Requirements (Very Important)
No public member directory
Members cannot view other members’ profiles
Member data is visible only to Owner, Executive Admins, Chapter Admins, and authorized Staff
No personal data exposed publicly
Public Verification System (Required, Limited)
Member Verification (Public)
Enter Membership ID
Shows:
Verified / Not Verified
First name or initials only
Status (Active / Not Active)
Chapter Verification (Public)
Enter Chapter ID
Shows:
City/state
Chapter status
Leadership role title (no personal details)
No personal or private information is displayed.
Digital Membership Card, NFC & Mobile Wallet (Required)
Digital membership card with QR + NFC
Automatically sent by SMS after approval
Member can download card to Apple Wallet / Google Wallet
Staff can re-send wallet card anytime
Expired or suspended members show invalid status
Events & RSVP System (Members Only – Adult Protected)
Events NOT visible to the public
Not indexed by search engines
Only approved members can:
View events
RSVP (Yes / No / Maybe)
Optional email/SMS reminders
This keeps adult events private and away from children.
Rush / Greek Dance Login (Inside Member Login Only)
Members-only section for Greek dance practice and rush coordination
Shows:
Location
Date/time
Chapter-specific access
Not visible to public or unapproved users
Membership Payments, Levels & Dues (Stripe Required)
Stripe Checkout / Payment Links
Annual membership payments
Multiple membership levels
Member dashboard shows:
Balance
Dues
Payment history
Renewal date
Unpaid members automatically move to expired
Real Name Verification & Fake Name Detection
Legal First Name + Last Name required
Nickname allowed as display name
Legal name must reasonably match Stripe billing name
Fake or mismatched names flagged for admin review
Staff Search, Support & Internal Notes
Staff can search by:
Membership ID
Phone number
Email
Name
Staff can:
View status & payment
Read internal notes
Send/re-send wallet membership card
Staff access is support-only
Geolocation, Navigation & Accessibility
Geolocation arrival detection (event-time only)
Visual alerts for staff (no sound-only alerts)
GPS navigation with “Open in Maps”
Helps members and staff find venues easily
No continuous tracking or permanent storage
Offline Check-In / Check-Out & Capacity Control (Required)
Offline NFC / QR / Membership ID check-in
Syncs when internet returns
Door/security staff can:
Check members in and out
See current count inside
See capacity limit & remaining spots
Expired or suspended members blocked at entry
All actions logged for audit
Permanent Ban, Threat Protection & Anti-Evasion
Owner/Admin may permanently ban accounts
Track device, mobile, IP, and behavior patterns
Block re-registration attempts
Full audit logging
Security & Audit Logs
Secure sessions
Short session expiration
Logs for:
Logins
Approvals
Payments
Wallet sends
Check-ins / check-outs
Capacity counts
Geolocation alerts
Bans
Developer Pricing & Bid Transparency (Required)
Developers must be honest and transparent about pricing.
Provide a clear total project cost
Break down costs (development, integrations, testing, deployment)
Clearly state:
What is included
What is NOT included
Any optional future costs
No hidden fees after the project starts
If scope exceeds budget, this must be stated before acceptance
Unclear or misleading bids will be rejected.
Budget Range Expectation
Expected budget range: $600 – $3,000 USD (fixed price)
Developers must explain how they will deliver within this range
If a higher budget is required:
Provide a clear justification
Include a detailed breakdown
State it upfront in the bid
Bids that ignore or do not respect this range will not be considered.
Phased Budget & Scope (Strongly Preferred)
Phase 1 – Core System (Required)
Estimated range: $600 – $1,200
Includes:
Secure authentication & default-deny access
Membership approval gate
Role-based permissions
Real name verification
Stripe payments
Digital Membership ID (QR)
Staff search & admin tools
Public verification
Audit logs
Phase 1 must be fully usable and secure.
Phase 2 – Advanced Features (Optional)
Estimated range: $1,200 – $3,000
Includes:
NFC + Apple/Google Wallet
SMS delivery of membership ID
Events & RSVP
Offline check-in / capacity tracking
Door/security dashboard
Geolocation alerts
GPS navigation
Rush / Greek Dance section
Permanent ban system
Important Notes for Developers
This project is to build the system only
Developers must not register as members
Only the Owner or authorized Admins may approve, suspend, or permanently ban members
Laravel + PostgreSQL + managed cloud hosting
Here are 2 copy/paste lines you can add to your Freelancer post so devs stop pushing SQL Server:
Platform Preference (Add to Job Post)
Preferred stack: Laravel (latest stable) + PostgreSQL
Hosting: managed cloud server (DigitalOcean / AWS / Azure / Render) with SSL, backups, and security hardening.
Show More