Web Security/Structure Overhaul

My website was recently hacked with an iframe insert. It is currently blocked by google as a "Reported Attack Site". I am restoring the site from backup right now, but I want to do a complete security overhaul so that my sites are set up correctly and hopefully more secure from future attacks. I want to rebuild my entire web root so that I am observing best security practices. I have no knowledge in security at all, but I have discovered some problems with my setup already. I need someone who understands how to set up the root hosting account and all of the web content folders and applications for the best security and use. I am trying to build a series of websites to display and sell photographs, both .jpg downloads and prints that are mailed to the customer. I am configuring Gallery2 so that clients can login, then are redirected to the album they wish to view. They can then add photos to their cart and complete a Paypal checkout. I have not completed this yet. Joomla is installed in the root directory and probably needs to be moved to a better location. I will need help with this. Note: I am willing to switch from Joomla if you propose a more secure? CMS solution. We use the CMS for articles/blogging and hope to add some calendar display and someday facebook integration. I need something that is easy for my wife to login to and add content without my help. For client downloads, I have learned that these need to be located outside of the web root. I do not know how to do this with godaddy so I need help to set this up. Basically I just need a security overhaul so I don't get hacked like this again. I am very open to your recommendations. ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows? (depending on the nature? of the deliverables): a)? For web sites or? other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software? installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform Web