I have 60 sites that need updating scripts or permissions added

<[login to view URL]> See this above url this is somewhat the adminpanel my sites have except mine are smaller and they just have ways to update content to pages, upload images, and upload mp3s. My sites have now been attacked and there are people uploading php files to my site. I was told that we need permissions for image sections to only upload ".jpg" files to be uploaded and for mp3 sections just .mp3 uploaded. Some may have videos and I will tell you which to do. Right now we are looking for a security expert to help with this $200 to help fix all sites so we do not have these attacks anymore. We run a linux host and all sites are within 1 ftp for easy finding. We need coder with static ip as we have ip protection but they can still attack.