PHP Security expert needed to secure a simple PHP Member Login Website

We have a simple PHP website with a members login facility. A few months ago, someone managed to hack the CPanel and change files. We would like a security expert to check all the connection scripts on the website to make sure they are secure. You should produce a list of recommendations and prices to fix the issues. As an example the website uses simple PHP for the user login such as this example: <?php include('[login to view URL]'); if(isset($_POST['login'])) { $sql = "SELECT * FROM users WHERE email = '".mysql_real_escape_string($_POST['user'])."' AND password = '".sha1($_POST['pass'])."' AND status=1"; $result = mysql_query($sql); if(mysql_num_rows($result) == 1) { $user = mysql_fetch_object($result); $email = $_POST['email']; $_SESSION['id'] = $user->id; $_SESSION['cms']['auth'] = true; $_SESSION['cms']['name'] = $user->name; $_SESSION['cms']['email'] = $email; $_SESSION['cms']['perms'] = unserialize($user->permissions); $_SESSION['login_user'] = $user->name; echo '<script type="text/javascript"> [login to view URL] = "[login to view URL]" </script>'; exit; } else { $errormessage = "Login incorrect"; $error = 1; } } We also have a login issue with the admin area which we would like you to fix at the same time. Currently the passwords are not allowing us to login. Thanks in advance.