Secure Fix Bugs and Upgrade Custom Core PHP SMM Panel
Budget: $30 – $250 USD
I need a skilled PHP developer experienced with the Twig templating engine to resolve several critical issues on my custom SMM panel website. The site currently has multiple vulnerabilities:
Users can place orders without having sufficient funds.
Prevent orders when funds are insufficient.
Notify users of insufficient funds.
The password reset functionality is non-functional.
Email reset password
Email verification process twig
There are potential SQL injection risks in form handling. Implement CSRF and XSS:
Add CSRF tokens to all forms: Generate a secure token in PHP, store it in the session, and include it as a hidden field in each form. On form submission, validate the token before processing input.
Sanitize and validate all user inputs to prevent SQL injection and XSS. Use prepared statements (mysqli or PDO) and escape output in Twig templates.
Hide admin URL to make it only accessible to me
Upgrade from PHP 7.4 to the latest
This is a custom-coded PHP site using Twig, so strong familiarity with both is essential. Your task will include auditing the current codebase, fixing the broken features, and securing the site against abuse.
Skills required:
PHP (custom development, not frameworks)
Twig templating engine
Web security (especially related to SQL injection and form validation)
MySQL
__
Users can place orders without having sufficient funds.
Prevent orders when funds are insufficient.
Notify users of insufficient funds.
The password reset functionality is non-functional.
Email reset password
Email verification process twig
There are potential SQL injection risks in form handling. Implement CSRF and XSS:
Add CSRF tokens to all forms: Generate a secure token in PHP, store it in the session, and include it as a hidden field in each form. On form submission, validate the token before processing input.
Sanitize and validate all user inputs to prevent SQL injection and XSS. Use prepared statements (mysqli or PDO) and escape output in Twig templates.
Hide admin URL to make it only accessible to me
Upgrade from PHP 7.4 to the latest
This is a custom-coded PHP site using Twig, so strong familiarity with both is essential. Your task will include auditing the current codebase, fixing the broken features, and securing the site against abuse.
Skills required:
PHP (custom development, not frameworks)
Twig templating engine
Web security (especially related to SQL injection and form validation)
MySQL
__