Need a good programmer YII / php

Need a good programmer to fix the error 403 Forbidden.
On the website in the root filled tmp.php (shell).
1. Need: to restore the service
2. Possible: to close access from sql injection / close the vulnerability (hole through zagruzka files via