If you think I'm a bit rude, sorry but that is the point - to show that you need to rethink what you are doing. I would be happy to properly disclose your security vulnerabilities if you didn't choose to make a site handling money (without a clue of what you're doing) as one of your first projects.
People who try to do this need to be discouraged. We don't want another bitcoinica or instawallet.