Full Server Migration + Anti-Spam PRO + Free Local AI Learning

Full Server Migration + Anti-Spam PRO + Free Local AI Learning **Fixed Budget: $30 USD** I am looking for an experienced developer/server administrator to migrate my existing website from its current server to a **NEW SERVER** and upgrade its existing Anti-Spam system. ## IMPORTANT — PLEASE READ THE ATTACHED ZIP FILE I have attached a ZIP file containing the **complete and detailed project specifications**. **The attached ZIP file is part of this project specification and must be read BEFORE placing a bid.** The ZIP contains all required functions, migration requirements, Anti-Spam requirements, security requirements and final tests. Please do not bid based only on this short description. --- ## 1. FULL WEBSITE MIGRATION PauloTrip.com is already developed and operational. This is **NOT a website rebuild**. I need the complete existing website migrated from the CURRENT SERVER to my NEW SERVER. The migration includes, among other things: - Website files - Complete database - Admin CMS - Users - Partner accounts - Listings and categories - Images/uploads - Messages - Existing spam/quarantine - Existing blocked IPs - Existing Anti-Spam configuration - Security logs - Email/SMTP configuration - Cron jobs - Queue/workers where applicable - PHP/database configuration - Environment/configuration - SSL/HTTPS - Existing SEO URLs - Redirects - Sitemap - robots.txt A complete backup must be created before migration. The old production server must remain untouched/available until the new server has been completely tested and approved. The new server must be tested BEFORE the final DNS switch. A final database/data synchronization must be performed where necessary to avoid losing recent messages, users or other data. **No data loss is acceptable.** --- ## 2. EXISTING ANTI-SPAM MODULE PauloTrip already has an Anti-Spam system. It already includes several functions such as: - Spam management - Quarantine - IP blocking - Automatic blocking - Email blocking - Honeypot - Rate limiting - Duplicate detection - Link limits - Security logs I do NOT want this system unnecessarily rebuilt from zero. I want the existing module **improved and upgraded to Anti-Spam PRO**. --- ## 3. CLOUDFLARE TURNSTILE CMS Add complete Cloudflare Turnstile management inside the PauloTrip Admin CMS. Required functions include: - Enable/Disable - Site Key - Secret Key - Protection per form - Test configuration - Server-side validation status - Accepted/rejected statistics Turnstile must be validated **SERVER-SIDE**. Displaying the Turnstile widget alone is NOT sufficient. A direct POST request without a valid Turnstile token must not be able to bypass the protection. The Secret Key must never be publicly exposed. --- ## 4. ADVANCED IP BLOCKING From the existing: **Admin → Messages → Spam** I want to select multiple spam messages and click: **BLOCK SELECTED IPs** The CMS must automatically collect and deduplicate the corresponding IP addresses. I do NOT want to manually copy/paste each IP. Also include: - Individual IP blocking - Bulk blocking - Bulk unblocking - 1 hour block - 24 hour block - 7 day block - 30 day block - Permanent block - IPv4/IPv6 - Whitelist - Search/history An already-blocked abusive IP should be rejected before another normal spam message is created. --- ## 5. ADVANCED RATE LIMITING / HONEYPOT Improve the existing protections. The CMS should allow configurable limits for: - IP - Email - Time period - Temporary block duration - Automatic blocking Keep/improve the existing honeypot protection. Different public forms may have different protection settings. --- ## 6. FREE LOCAL ANTI-SPAM LEARNING I also want a **FREE, SELF-HOSTED LOCAL LEARNING SYSTEM**. **NO paid AI API for normal spam classification.** Do not require OpenAI, Claude, Gemini or another paid AI API. The learning system must run locally on my new server using an appropriate lightweight open-source/local solution. The system should learn from administrator decisions: **SPAM + LEARN** and: **NOT SPAM + LEARN** It must learn from both spam and legitimate messages. Existing confirmed spam can be used as initial training data. --- ## 7. LOCAL LEARNING CMS Add an administration section such as: **Admin → Anti-Spam → AI Learning** Functions should include: - Learning status - Spam examples learned - Legitimate examples learned - False positives - False negatives - Train - Retrain - Test Model - Backup Model/Data - Export - Import - Reset Learning The learning data/model must be included in backups and future migrations. --- ## 8. SPAM RISK SCORE New submissions should be able to receive a configurable risk score from **0–100**. Example: **0–29 → Allow** **30–69 → Quarantine** **70–89 → Spam** **90–100 → Reject** Provide a **Learning / Observation Mode** so the system can initially analyze messages without aggressively blocking legitimate visitors. The administrator must be able to correct false classifications. --- ## 9. MULTI-LAYER PROTECTION The final Anti-Spam system should combine: **Turnstile + Server-Side Validation + Honeypot + Rate Limiting + IP Blocking + Existing Anti-Spam Rules + Local Learning** The local learning system must complement the existing security protections, not replace them. --- ## 10. DASHBOARD & LOGS Improve the CMS security dashboard and logs. I want clear information about: - Requests analyzed - Legitimate messages - Spam detected - Turnstile rejected - Honeypot detected - Rate-limited requests - Quarantined messages - Blocked IPs - Local-learning detections - False positives/negatives Useful filters should be available for IP, email, date, form, action and risk score. --- ## 11. FINAL TESTING Before delivery, the developer must test the complete project, including: - Website migration - Database - CMS - Users/partners - Images/uploads - Email - SSL - Cron/queues - SEO URLs - Turnstile - Server-side validation - Direct POST bypass protection - Honeypot - Rate limiting - Individual IP blocking - Bulk IP blocking - IP unblocking -