Cre Loaded Cross Scripting

We have a Creloaded Store online, Few days back it was infected with some malecious script which had format. script tag malecious url script tag which is calling malecious sites on page loading. It spread in the pages(html) & database as well. Fortunatley we hadbackup sp we restored the fresh copy. Now what i want is to FIX the bugs or loop hole in the code to prevent such things in future. You have to explain possible causes to win this bid. Also we have Free Cre Loaded Version Right now-if you have latest B2B version , can you update this as well (optional - please mention price seperatley for both things) Please Dont post your generic bids. More details will be provided to selected coders ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables): a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform PHP, My SQL CRELOADED Cross Browser Compatiable