Ok, i have everything as it says now. I have also now moved to a dedicated server with SSL and SSH. This should help secure everything a bit more!
Iv actually done everything and everything seems to work still. Getting all users to change their password now. In the mean time i am unsure of what file permission each file/folder should have. I have config set to 750, the rest are 755.
im really not keen on doing that. i am to scared incase i loose anything or something goes wrong! Would anyone from here be able to do it for me?