A server nor website can be done in few hours. The fastest typer in the world couldn't even do it.
1. You have to figure out what is going on with the website.
2. You have to secure EVERY SINGLE LINE OF CODE!
I don't care how good you think you are. But no one in the world can secure 500,000+ lines of code that quick.
And you throwing quick little functions in the header is not securing a website.
But if you want to show us all wrong. Please do.
secure this. Don't say you won't waist your time, cause if your that fast you can do this query in 2 seconds.
//$_POST['text'] is a text.
//Query
mysql_query("UPDATE something SET that = '{$_POST['text']}' WHERE that = that");
//Provide the proper way to display the Variable
//Assuming the $text is called from the database. that you jsut secured.
echo $text;
That is a super easy one there.