Hi there, how are you doing?
I have taken a quick look at the site and can immediately see some errors in the code; JS scripts are declared before the top of the HTML, a fix which should be made before anything else actually.
Do you know if you're using a framework to generate the code or if it's raw coded? I'd be happy to go through with you exactly what needs to be done and to check your code base to just check that my quote is reasonable - my feeling is that it's good as it is, just for security.
Please send me a message if you like my proposal, even if I am offline, and let me know the best time to catch you online.
I'll let you know a bit more about me.
=== signature ===
British living in Manila - Website Applications Developer - PHP/MySQL / HTML/CSS/JQuery/AJAX/JS / SEO - 11 years experience building front-end and back-end for a global yacht charter company. I was the sole developer for 90% of that time. I also built my own online yahtzee (dice game) community with real-time games/chat which is still fairly popular today.
Some of the projects I have completed: booking systems, search/sales/accounts/management/CMS tools, file upload handling, image processing (sizes, adding text, grafting two images etc etc), on-the-fly PDF creation, automated emails with files attached, web-scraping (with/without login spoofing), email scraping, financial/accounts calculations/reports, complex management reporting, proposal creator, editing responsive designs, chat etc