Just restoring a hacked server and checking anything that might be an entry ...:
When you think about security all day long, having a prob with dozens of domains all possible ways of security thinking go through your head..
Once in a while I looked (just while restoring from hacked server) into an elder but renewed phpwcms version --> when uploading newer Version make shure you have deleted the old spaw directory !
That makes live more easy living
