Urgent Php/Laravel E-commerce Security Audit and Vulnerability Fix

We run a live e-commerce backend built on Laravel 10 and PHP 8.3. It runs on an Ubuntu vps with nginx, php-fpm and mysql 8. Earlier this year an attacker got into our servers and put a crypto miner on them. We cleaned that up and rebuilt the servers. Now we are seeing a PHP security problem again, and we want an experienced developer to find it and close it properly so it does not come back.

The job is to find how the attacker gets in, remove any malicious or injected PHP files, webshells or backdoors, and patch the hole. That could be a vulnerable package, an unsafe upload, a bad file permission, an exposed .env file or a misconfigured nginx or php-fpm setting. Once it is fixed, send us a short plain-language write-up of what you found, what you changed and anything we should keep an eye on.

You should have strong hands-on experience with PHP, Laravel, Composer dependency auditing, Linux server administration over ssh, nginx and php-fpm configuration, and mysql. You should also know how to do malware and webshell detection, file permission hardening, and incident response on a compromised web server. Experience with GitHub Actions deployments is a plus, because our backend deploys through CI.

This is urgent, so we need it finished within 2 to 3 hours of starting. Please only apply if you can start right away. In your proposal, tell us about a similar PHP security issue you have fixed before and how you approached it. We will share server access with the developer we hire.

Thanks, and we look forward to hearing from you.