Symfony PHP Developer for SMM Panel Issues

I need a skilled PHP developer experienced with the Twig templating engine to resolve several critical issues on my custom SMM panel website. The site currently has multiple vulnerabilities:

- Users can place orders without having sufficient funds.
- Prevent orders when funds are insufficient.
- Notify users of insufficient funds.

- The password reset functionality is non-functional.
- Email reset password
- email verification process twig

- There are potential SQL injection risks in form handling. Implement CSRF and XSS
- Hide admin URL to make it only accessible to me

This is a custom-coded PHP site using Twig, so strong familiarity with both is essential. Your task will include auditing the current codebase, fixing the broken features, and securing the site against abuse.

Skills required:
- PHP (custom development, not frameworks)
- Twig templating engine
- Web security (especially related to SQL injection and form validation)
- MySQL

Please include examples of similar work or vulnerabilities you’ve fixed in past projects. Looking to get this resolved ASAP.