Are you asking us to sum up the entire university course in "Information-Systems Security" in one post? Making a website like ebay takes a lot of work of a large number of people, most of which being diploma specialists.

Who are you doing the project for anyway?