Web App Security Cleanup & Deployment

I need a security-minded developer to comb through the codebase of my web application, which mixes legacy PHP with a newer Python/Django API layer. A recent scan showed traces of hidden backdoors and the classic trio of injection issues—SQLi, XSS, and CSRF. Your first task is to locate and eradicate every backdoor, then patch the vulnerable entry points in both stacks without breaking existing features. Once the code is clean, I want the application redeployed to a fresh server image (Ubuntu-based) using best-practice hardening. After deployment, run functional and security regression tests so I can see proof that the patches hold under load and normal usage. Deliverables I must receive: • Sanitised source code with clear commit history • Brief report detailing each vulnerability found and the fix applied • Hardened server setup scripts or Ansible playbook used for deployment • Test log or report confirming that core functions and security checks pass If you have hands-on experience with PHP 7+, Django 4.x, automated security scanners, and Linux server hardening, I’d like to get started right away.

Projektin tunnus (ID): 40190733