Repair Exploited osCommerce Site

My site was hacked. Its an OScommerce (os) site and operates with Creload and payment/shipping modules (paypal, fedex and usps) that are functional. Never had the chance to run the site for more than a couple of days. Developed this year, I hosted with [login to view URL] per developers suggestion. After uploading live I got hacked in 3 days. Host said “world writable code?? the culprit. Developer said “flaws?? in host. Developer re-wrote code to be non-world writable (?) and we re-loaded. Day later, site hacked. The developer suggested changing hosts to siteground.com. Day 1 or day 2 the site was wiped out again. Developer‘looking into it’, and SO AM I! Need expert os/Creload person to back me up. I'm leaving original developer and harbor no ill will towards him. I simply think he was sloppy with the development. I have no experience in web development. I specifically want a person qualified in os (code and Creload) to fix this problem and to be available for initial support. Later, I will require hard coded item support for this and my one other live website. I want this site running live, secure from these hackers with all the standard functions that are currently in place working properly. This would include shipping and payment modules and email set ups for sales and info, as well as page links that are already located within the site. I need my new RAC to upload the corrected files to [login to view URL] and to provide the preliminary support to get me going again. I also need to have a mechanism in place to supply and install any necessary updates in the future for os functions within the site to be protected from the bad guys. Future work will be gladly negotiated. The site is still visible on a temporary server and I have access to the ftp files and the “data dump??. I look forward to your replies and inquiries. The time line is not urgent, however consistent communication is greatly appreciated. I look forward to working with you. Eric ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables): a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform I think it is windows. sorry!