You might be thinking: "I hear you, but I genuinely cannot afford $200 for a script."
Run a security scan immediately. Tools like Wordfence (for WordPress) or Maldet (Linux CLI) can help detect known backdoors. php nulled scripts