As following tips
1.when I want to sign a message, do I must have the private key?

2.any one can using just public key to sign a message?and pass verification?

3.is there any trusted site or tool for signing?

4.how to implement it by PHP?(code better)

Thanks a lot ,I pay $50 worth bitcoins for the best reply.