When you hire someone to do a job for you, the first thing you would expect is that not only will they make it a point to insure safety to the script itself, but safety to the server as well. A client has previously worked with a programmer who is a complete bonehead! Passwords that are supposed to be secure are so insecure that they’re on the top of hackers lists noted as “dumbest passwords in existence”. Going back and fixing everything this goon has done isn’t going to be an easy task, that’s for sure.