My question is this. From a subjective view (im not technical) what would be the best/smartest way to have someone who knows hacking review my code and give me instructions on fixes.
Currently i have
-ran software (that guy was good but got busy and bailed on me)
-posted some jobs on elance (about 2-3 highly reviewed people bid but still not sure if its the smartest route.
-finally there is a good college nearby with a really good computer science department. Tomorrow i plan on driving there and trying to get an undergrad to start reviewing code.
I would like to hear some feedback, from a non technical standpoint, knowing what you all know, what is the best strategy to securing my website up. Over 500 hour project so far, so pretty big. I noticed when it was too late they are using some GET and POST variables where most likely they shouldn't be. So again, id appreciate the feedback.