I recently had a website developed in Yii and MySQL. The company that developed it has been giving me the run around. They fix one thing and then break another. My site is not functioning properly. I don't trust them anymore to work on my website.After they made a recent change the request password / reset password function is not working and I don't think they know how to fix it. Users can't login any more and can't retrieve their password.I also need to have the code looked at to make sure it is 100% secure from SQL injection. The code was so sloppy that a user could login and view another users information including changing other users information and delete a user. They said they have fixed the issue but I need a second opinion.I need to make sure there are no loopholes or callbacks that they are able to access my site and code as well as monitor my site.All changes and findings need to be documented for me.Before bidding on this project you need to make sure you have a minimum of 30 positive feedback and you must be fluent in security. If you don't meet these requirement don't bid.I will take your bid as firm. Do not bid then change the amount afterwards.

Employer have allocated budget for this project but you can increase or decrease bidding amount based on requirements.