My website has been hacked

[YoYaYo]

Hi brothers ;

I have a website and hacker hacked it ....

but i have reset the things to normal ...

my question is : i changed the pass of : Database , E-mail , FTP Access and Cpanel .... is there any other way that this hacker can get into my site again by the password ?!

thanks and waiting for experts answers ..

 

[thecrofty]

Did you change your username and pass on the site

 

[nEw_boY]

Depends upon how he got in ?

Keylogged ?
Exploit ?

 

[soft2050]

Has your other accounts has been hacked too?

If not, check all your folders through ftp for suspicious scripts

He might have uploaded a backd00r too

 

[XSLTel]

and double check your files for unwanted php files (php shells) some hackers leave them to hack your site again and again, and removed all .htaccess files in subdirectories (I can't explain why) but its better for you

 

[nEw_boY]

One more question, you used old backup or just got back the access & left the data intact ?

 

[Solutho]

Check the used IP and give it a look at the log. It uses to leave clues about the used method.

 

[YoYaYo]

My username and password are not effective in hacking because the hacker is my designer

 

[soft2050]

You mean to say the script designer?

Then he can do anything with your site as he might have already added some malicious code

Anyway, if you have good php knowledge then check them

 

[YoYaYo]

No a very good PHP knowledge .... but all i have done and he can access the site again ?!:O

 

[soft2050]

Yes he can easily access again But only if there is some malicious code

 

[YoYaYo]

Is there any way to know these code i can check all site files !!!