I wasnt talking about the ad, I was talking about the face to face (or at least a virtual) meeting/conference, If you place your faith in hiring staff without having a 'live' interview with them then this is probably your first mistake.
No, I only claim to know 89% of the programmers of the world.
And by the looks of it your in Toronto, where there are scores of perfectly good programmers, so why were you looking halfway round the world ..... price? .... sorry but you buy cheap you get cheap, and thats life Im afraid. I assume that they gave you references that you checked out ?
And Im confused, you hired an Americain to fix problems with an application that was built by different programmers in different countries speaking different languages. The fact he was hired by you and never spoke to you of security would suggest that he wasnt hired to fix the security issues of which you speak, so you already had problems with site outside the security issue ... how am I doing so far ? Then your complaining that this site had holes in its security, it sounds like it was a sham from the begining.
Absolutely NOT. You dont expect a mechanique to educate you in your car safety, or an electrician educate you in regulations pertaining to house wiring. You expect them to the their job properly, which comes down to finding someone you have trust in, that is open and that tells you the way it is and not just what you want to hear, and can give you solid references.
Now if you do know about cars or electrics then and only then are you in a position to question them on their knowledge and decide whether he is good enough to do the job you want.
If you want me (and I suspect most of the contract programmers here) to do a job you'll get a price to do that job, but it wont include teaching you our job, the price will include the level of security that the programmer sees appropriate for that job. (unless the client has specified security levels that exceed those estimations in the contrat). If I see a hole in your specification I'll plug it, if you asking for something thats really over the top I'll tell you and explain why thats over the top in your situation and ask do you really want me to do that. But it certainly doesnt extend to educating you in my field of expertise.
As has been said by me in my first reply and by Jeff above also, if you dont know the problems yourself then you cant be the one asking the questions.