Create a login application to practice user authentication and input validation.

The login application will support:

1. Login with different roles

The user can login with their username or email address(both should be unique) and the correct password. The login should support at least three different roles: normal user, super user, and admin user. The different user has different privileges. Your application should prevent a user from manipulating with their privileges.

2. Log out with a button or a hyper link

3. User registration

The user needs to provide a username, email address, password during the enrollment. You should require the password to be a strong password. For example, require that the password must be greater than a certain length and has a combination of alphanumeric and special characters. When the user first registered, he can only be a normal user. The admin user will have the power to upgrade a specific user to super user or admin user.

Requirements:

All the user information should be saved to a database or a file on the back end. If you are using a database in the backend, you have to make sure that the database connection is secured and is not prone to SQL injection attack. If you are using a file, you should make sure that attacker cant get access to your application by viewing or changing the files. You may consider having all the information saved to file encrypted or hashed.

All the passwords should be saved as salted hashing using sha256 or more secure hashing.

It will be an open assignment. You can implement it with The Web, or GUI based interface. You can use any language or framework you prefer.