How to make ojs not easy in hacked?

how to make ojs not easily hacked? because my ojs ever redirect other website

Can you please describe what you are seeing, step-by-step? Screenshots would be helpful.