secure mysql php site from site injection, transfer to new server.

You must be skilled with MySql and PHP, you understand how to make a site secure to prevent site injections. You will take responsibility for securing the site through other means too such as editing .htaccess. If you know php/mysql but are not familiar with securing sites please do not apply. BACKGROUND A site was created using php/Mysql, but was hacked. The code was not secure. It was cleaned and the php was edited once, hacked again, PHP updated to 7.0 but the site still revealed vulnerabilities. I don’t want to fix it again. You will be updating the code and the database, I will create a new database, provide FTP credentials, provide the files and and export of the existing dbase. I will use your instructions. I rely on your skills and professionalism to ensure the final site is secure. A final security review will be done before payment. For SSL I would like to use a free service. I have a security report recommending the following… * SQL Injection: Use stored procedures to prevent attackers from altering the queries, and filter user input to discard invalid characters such as ' * Cross Site Scripting: Filter user input to discard characters such as < and >. Make sure your server does not display error messages that contain input received from the user. * Source Disclosure: Make sure all debugging information is turned off from production servers. Scripts should be configured to be executables only, with no ability for a user to view them. * Non-SSL login: All login pages should be SSL protected (e.g. have an https:// link). When using non-SSL protected pages eavesdroppers might be able to capture usernames and passwords * Sensitive information sent over non-encrypted page: Make sure all sensitive information is sent over SSL-protected pages.