PHP Web App Security Audit

I have a PHP-based web application that I want to put into production with complete peace of mind. Before I do, I need an experienced full-stack developer to comb through the entire codebase, spin the project up on a clean server, and confirm that nothing malicious or inefficient is hiding inside.

Here is what I expect:
• A deep dive into every PHP file and any supporting assets to judge overall code quality, maintainability, and adherence to best practices.
• A focused security assessment that looks for backdoors, exposed credentials, outdated libraries, common exploits (SQL injection, XSS, CSRF), and any unsafe configuration in the web server or framework.
• A performance review that pinpoints bottlenecks in database queries, memory usage, or slow endpoints and suggests practical optimisations.
• A short written report summarising findings, risk level, and recommended fixes, followed by a clean, patched version of the project in a Git branch or pull request.
• Clear setup notes that let me reproduce the tested environment on my own VPS without surprises.

I will grant you access to the repo and a fresh staging instance the moment we agree on the approach. If you can demonstrate prior security audit experience on PHP web apps and are comfortable documenting each step, I am ready to get started right away.