audit how secure a website is. And also check if it can be migrated to shared server, and wht is required to do that, and how that can assist with getting it more secure

This is a custom-built PHP website currently on a Virtual Private Server that is super old. The code is old, so is the server. Given how old the site is I am not sure if it requires PHP4 or even older or what and can be done - it might be such old code that a new host won't support it, I am not sure. A client using the host already is concerned a client has said they get spam email now and think this site is the source, or something like that, its vague so we want an audit to be sure its not been hacked. The objective is to demonstrate -= if possible - that the site has not been hacked, but to also recommend what can be done to further improve security, and what needs to be done to allow it to be migrated to [login to view URL] hosting. So I presume you will use a [login to view URL] file to find out what versions of the database and PHP are being used, and then cross reference to see if they can be upgraded without the site crashing. To complete this I can provide the following: WHM access to the root of the account, contains more than 1 site that is hosted there. Access to [login to view URL] reseller account for the migration if need be. I need this project completing within the next 2 hours please. To ensure you have read the brief, I will delete your bid unless It starts with the keyword “haddock” Sorry if you find that a pain but for me it’s the best way to get rid of the spam bidders.