Prevent Information Disclosure & Prevent PHP execution

I opened a ticket a few weeks ago about this. The site upstatebirth.com has some weird login and says its hacked. It keeps disappearing from THE HUB. It just reappeared so I was trying to update all of the security warnings. Just trying to figure out how to fix the following issues... Prevent Information Disclosure & Prevent PHP Execution.