297916 Fix security holes in script

There seem to be some security holes in my getpaid script (CreateYourGetPaid), url: http://www.gold4email.com. Somebody got admin access and transfered more than 100$ to his/her e-gold account thanks to this hole. The guy who "hacked" it told me there were holes in the automatic payment system. I need someone ASAP to help me fix these bugs, but i can't afford more than $100.-, PLEASE anyone, help me fix these holes!! You can contact me on messenger (ruststilteenwijding[AT][login to view URL]). Thanks in advance!