Malware removal & sucure site (new programmer required)

My review site was hacked several times and once again I identified malware. It is possible that some of the applications are vulnerable to attacks (to SQL injection attacks or XSS attacks). Need a person who can analyse PHP code for safety and can create a stable version. Please check my site (swiss recommend . ch) and provide me your suggestions for improvement. The malware is coming from this file: X-SG-Opt: SCRIPT_FILENAME=/home/swissrec/public_html/theme/default/js/uploadify/[login to view URL] REQUEST_URI=/theme/default/js/uploadify/[login to view URL] PWD=/home/swissrec/public_html/theme/default/js/uploadify REMOTE_ADDR=[login to view URL]