15
there are only two admins on the site.
The other one is a best friend and even he was surprised as to what happened.
If I have to guess, the person who did it, must have used an exploit to give a regular user account special access.
Doing a simple google of his 'team' name which I provided, you'll see this person has 'hacked' quite a few sites.
@ irmtfan, I think you are misunderstanding the situation.
Lets say I have the picture module on your site, you don't need FTP access to delete a picture that is uploaded.
Its like a forum, if you are an admin, you don't need ftp access to delete a topic. You can delete files you upload by going to the correct module and then deleting the file you select.
We are talking about file uploads and pictures not any other file.
So my initial worry was that somebody would be able to gain access again by managing to gain admin rights again.
