|
Make sure any PHP programs you are using are updated, check your directory that holds your .htpasswd file for any strange php files, one in particular is called help.php, it will allow them to create users (or do pretty much anything to your server).
If you are using a forum, don't use FreePHBB, use vBulletin and again make sure it's the most recent version.
Plus all the other shit other people have said.
|