Fixing the website error on Joomla.

Hello! Our website hcdut.ks.ua (running on Joomla) has been hacked — the attackers defaced the main page. Our hosting is UAhosting. Unfortunately, our developer is no longer handling this and forwarded us the following (we apologize for the Russian): During a scheduled security check, we discovered that there is a Joomla site on your hosting account using the SP Page component. In recent days, we have been recording mass attacks on Joomla sites using SP Page Builder. In some cases, the result of the attack was the placement of malicious PHP files or the addition of external JavaScript code to the Joomla database, which could cause a deface "Hacked by...". What needs to be done now, while the site is still functioning correctly: 1. Make a complete backup of the site and database. 2. Update Joomla to the latest supported version. 3. Update SP Page Builder to the latest version or reinstall it from a clean official distribution. 4. Update the template, template framework, and all installed components/modules/plugins. 5. Remove unused, old, or unknown extensions. 6. Check the users in the Joomla admin area and remove unnecessary or unknown accounts. 7. Change passwords in cPanel, FTP, database, and Joomla admin area. 8. Check for public files in the root of the site like info.php, phpinfo.php, adminer.php, administrator.zip, or other archives/service files. 9. After updating, clear the Joomla cache and optimizer caches. 10. Hand over the site to a developer for a complete check of the CMS, template, and extensions. Important: if the site is not updated, the risk of repeated attacks remains high. The hosting may block individual malicious requests or clean detected files, but complete elimination of vulnerabilities must be done at the CMS and its extensions level. Please let us know if you can take this on soon and what the estimated cost would be?

Website: https://ott.net.ua/ CMS: ocStore 3.0.3.7 We are looking for a specialist to make changes to the website and for further cooperation on a permanent basis.First Task1. Updating the banners on the main page It is necessary to: replace the banners on the main page; banners will be provided in WebP format; check correct display on PCs, tablets, and mobile devices; adjust responsiveness, margins, and scaling if necessary; clear the cache after making changes.Further Cooperation A specialist is needed who can regularly perform website maintenance tasks, including: making changes to design and layout; enhancing OpenCart functionality; updating modules and the system; fixing bugs; optimizing website speed; SEO improvements; enhancing the mobile version; adding new sections, pages, and features; consulting on website development and implementing new capabilities.Requirements for the Performer experience with OpenCart / ocStore 3; proficient knowledge of PHP, MySQL, HTML, CSS, JavaScript; experience with responsive layout; responsibility and adherence to deadlines; willingness for long-term cooperation. When applying, please provide: examples of completed work on OpenCart; desired hourly rate or cost of work; information about experience with ocStore/OpenCart. Goal: to find a reliable specialist for ongoing support and development of the corporate website OTT.

It is necessary to implement a full cookie consent management mechanism (Cookie Consent) on the OpenCart (3 pcs) websites and configure Google Consent Mode v2. Requirements: install and configure a CMP (Cookie Management Platform) or another solution for managing user consents; implement a full Cookie Consent banner with options to accept, reject, and configure cookie categories; set up Google Consent Mode v2 through Google Tag Manager; ensure correct transmission of consent statuses to Google Analytics 4, Google Ads, and other marketing services; configure the operation of analytical and advertising tags so that they only trigger according to the user permissions obtained. Currently, the cookie banner is only informational and does not manage consents, nor does it transmit their status to Google services. A complete setup is required in accordance with the current GDPR and Google Consent Mode v2 requirements.

It is necessary to add 129 products. There is an export file with the products, however, the standard import does not fit, as it is necessary to create the catalog structure before uploading: categories, sections, and if necessary, subcategories. After that, perform the product import and check that all cards are correctly distributed among the categories. If you have experience with similar tasks, please send examples of your work, completion times, and costs.

WHAT NEEDS TO BE DONE The work is divided into blocks; you can take on everything or individual blocks: Block 1 — Speed Optimization (Mobile-First) The current PageSpeed score for the mobile version is 51/100. It needs to be raised to 80+. Target metrics: LCP < 2.5 s (currently 7.4 s), FCP < 1.8 s (currently 3.9 s), TBT < 200 ms. Tasks: critical CSS inline, deferred JS, WebP/AVIF, lazy load, plugin audit. Block 2 — GTM and Analytics Remove hardcoded GA4/Google Ads scripts from header.php. Install and configure the GTM4WP plugin. Implement Google Consent Mode v2 (script or cookie banner). Block 3 — Product Card Template A single Mobile-First Single Product template in Elementor. Sticky "Buy" button while scrolling on mobile. Cross-sell block of services under the purchase button. Check the automatic transmission of events view_item, add_to_cart via GTM4WP. Block 4 — Product Feed for Google Merchant Center Install Product Feed Pro (AdTribes) or CTX Feed. Configure XML feed with correct field mapping (id, title, gtin, brand, price, availability). Daily updates via WP-Cron, auto-exclusion of products "out of stock". Block 5 — 6 Landing Pages in Elementor 3 e-commerce pages: catalog of components, ready solutions for UPS, SES kits. 3 lead generation pages: turnkey UPS installation, SES for home, solutions for business. There are detailed prototypes with the structure and blocks of each page. Block 6 — Forms and dataLayer Events 6 unique dataLayer events upon successful form submission (CF7 and Elementor Pro Forms). Mandatory requirements for all forms: phone input mask, protection against resubmission, reCAPTCHA v3 or Honeypot. --- REQUIREMENTS — Practical experience with Elementor Pro (Single Product templates, custom Page Templates) — Understanding of WooCommerce dataLayer and GTM4WP functionality — Experience in WordPress speed optimization (Critical CSS, WebP, WP Rocket or similar) — Experience in setting up dataLayer events for CF7 or Elementor Pro Forms — Portfolio or examples of similar work — mandatory Knowledge of Google Consent Mode v2 will be an advantage. --- WORK CONDITIONS The site is on live hosting — all changes only through staging or test duplicate. Any optimization should not disrupt the initialization of GTM and the dynamic dataLayer. A detailed technical specification will be provided after the first contact. Payment is staged by blocks or for the entire project (we will agree) Please write in your response: 1. Your experience with similar tasks (links or a brief description of the case) 2. Whether you are ready to perform the entire project or individual blocks 3. Estimated cost and timelines after reviewing the technical specification