try to audit your website with offensive security tools. i usually use w3af for apps layer and metasploit for OS layer. http://infocurrencies.com - Trusted world currencies information, Technology By Email Phone & SMS : 0813 1875 9311 Email : info@xxxxxxxxxxxxxxxxxx --- On Sat, 10/7/10, Sovichea SOU <svch_sou@xxxxxxxxxxx> wrote: From: Sovichea SOU <svch_sou@xxxxxxxxxxx> Subject: My website had been hacked many times. To: php-objects@xxxxxxxxxxxxxxx Date: Saturday, 10 July, 2010, 13:24 Hello, One of my website has been hacked many times. The index.php was modified and it was low permission as well. I used to change hosting control panel and ftp password, but nothing good happen. I cannot explain you more than this. Please advice. Regards, Vichea [Non-text portions of this message have been removed] [Non-text portions of this message have been removed]