suggestions about Authentication with CI

[eluser]skunkbad[/eluser]
I had looked at a few that are here in the wiki, but ended up making my own. I'm at about 1200 lines of code so far, and will probably be done within the next week or so. What are you having problems with? I can't paste 1200 lines of code here, but I might be able to describe how I took care of certain tasks related to authentication and user management.

In my auth system, failed login attempts are logged in the database in various ways (by IP, and by username/password). After X attempts, a user is blocked from trying to login for X amount of minutes. The auth system also handles password recovery by emailing a user a specially crafted link back to my site. A person who is trying to guess email addresses will also be blocked for X amount of minutes. Blocking does require a query to the database, but I couldn't think of anything else.

I created my user levels to easily adapt to up to 9 levels, and this could be extended by altering one database field. Level 1 is a standard registered user. Level 9 I call Sudo, and I have a Manager level @ 6. I wanted to leave plenty of room for custom levels. For instance, if a Manager has some special authority that other Managers don't have, he might be level 7. In my auth system, a Manager can't modify another Manager's account, but has authority to modify some details of his/her own account.

There are many other details that have gone into my auth system. I wanted to make something I could paste right into a site, and with minimal modifications, have the site customized and start programming the real functionality of the site!

blessings,
Brian